SharePoint 2013 hosted apps response not using app domain SSL cert

SP2013 using host named site collections with wildcard cert (*.mydomain.com): access to various site collections i.e. site1.mydomain.com, site2.domain.com, etc. work fine. Setup for SP hosted apps using published articles (http://technet.microsoft.com/en-us/library/fp161236%28office.15%29.aspx):

# get service account and create app pools

$account=Get-SPManagedAccount"ADDOMAIN\SPAppServiceAcct"

$appPoolSubSvc=New-SPServiceApplicationPool-Name"SubscriptionSettingsAppPool"-Account$account

$appPoolAppSvc=New-SPServiceApplicationPool-Name"AppManagementAppPool"-Account$account

# create Subscription Settings Service

$appSubSvc=New-SPSubscriptionSettingsServiceApplication–ApplicationPool$appPoolSubSvc–Name"Subscription Settings Service"–DatabaseNameSP2013-SubscriptionSettings

$proxySubSvc=New-SPSubscriptionSettingsServiceApplicationProxy–ServiceApplication $appSubSvc

# Create App Management Service

$appAppSvc=New-SPAppManagementServiceApplication-ApplicationPool$appPoolAppSvc-Name"App Management Service"-DatabaseNameSP2013-AppManagement

$proxyAppSvc=New-SPAppManagementServiceApplicationProxy-ServiceApplication $appAppSvc-Name"App Management Service Proxy"

# Set app domain (dedicated domain for SPHosted Apps) and subscription name

Set-SPAppDomain-AppDomain"myapps.com"

Set-SPAppSiteSubscriptionName-Name"app"-Confirm:$false

Installed the *.mydomainapps.com as an IIS server certificate.

Can install/deploy VS2012 developed apps to developer site OK

Can install/deploy free apps from SP Store OK

When the app is called it correctly callshttps://app-appID.myapps.com/... but browser produces a certificate error: "The security certificate presented by this website was issued for a different website's address."

If you click "Continue to this website..." the app works fine. The certificate is NOT from *.myapps.com but instead is from the host SharePoint wildcard *.mydomain.com.

What am I missing?

Thanks,

Lon