etcd: Peer certificate with wildcard hostname not working

Running 3 CentOS 7.4 nodes with etcd 3.2.11-1.el7. I am able to generate the CA, server, client and peer certs per https://coreos.com/os/docs/latest/generate-self-signed-certificates.html. I can confirm the server and client certs are definitely working. However, my nodes are unable to form successful peer connections with each others on startup.

I generated the peer cert with these param:

export ADDRESS="*.mydomain.com"
export NAME=peer
echo '{"CN":"'$NAME'","hosts":[""],"key":{"algo":"rsa","size":2048}}' \
     | cfssl gencert -config=ca-config.json -ca=ca.pem -ca-key=ca-key.pem -hostname="$ADDRESS" - \
     | cfssljson -bare $NAME

Peer settings in etcd.conf:

ETCD_PEER_CERT_FILE="/etc/etcd/tls/peer.pem"
ETCD_PEER_KEY_FILE="/etc/etcd/tls/peer-key.pem"
ETCD_PEER_CLIENT_CERT_AUTH="true"
ETCD_PEER_TRUSTED_CA_FILE="/etc/etcd/tls/ca.pem"
ETCD_PEER_AUTO_TLS="false"

When I start the nodes, I see these errors being logged:

Feb 02 16:41:48 kube-etcd-01.mydomain.com etcd[12322]: b7e8b1c8346e3d56 [logterm: 1, index: 3] sent MsgVote request to 78886c6b59167b9 at term 130
Feb 02 16:41:48 kube-etcd-01.mydomain.com etcd[12322]: b7e8b1c8346e3d56 [logterm: 1, index: 3] sent MsgVote request to a421b19894562278 at term 130
Feb 02 16:41:48 kube-etcd-01.mydomain.com etcd[12322]: rejected connection from "10.1.130.156:54950" (error "remote error: tls: bad certificate", ServerName "")
Feb 02 16:41:48 kube-etcd-01.mydomain.com etcd[12322]: rejected connection from "10.1.130.156:54956" (error "remote error: tls: bad certificate", ServerName "")
Feb 02 16:41:48 kube-etcd-01.mydomain.com etcd[12322]: rejected connection from "10.1.130.156:54958" (error "remote error: tls: bad certificate", ServerName "")
Feb 02 16:41:48 kube-etcd-01.mydomain.com etcd[12322]: rejected connection from "10.1.130.156:54964" (error "remote error: tls: bad certificate", ServerName "")