WCF / ASMX :: Service Host And Https Cannot Find Any Metadata?

I created a WCF Service Library and there're 2 services (http endpoint and https endpoint) in the App.cofig file. The WCF Service Host had not problem to host the http endpoint but failed to host the https endpoint with these messages:

WCF Service Host cannot find any metadata. Additional Info: The service cannot be started. This service has no endpoint defined. Please add at least one endpoint for the service in config file and try again.

What's wrong with the configuration?

Excerpt of App.config file:
...
<behaviors>
<serviceBehaviors>
<behavior name="WcfSecurityService.ServiceBehavior">
<serviceMetadata httpGetEnabled="true" httpGetUrl="mex" />
<serviceDebug includeExceptionDetailInFaults="true"/>
<serviceCredentials>
<userNameAuthentication
userNamePasswordValidationMode="Custom"
customUserNamePasswordValidatorType="WcfSecurityService.MyValidator, WcfSecurityService"/>
</serviceCredentials>
</behavior>
<behavior name="WcfSecurityService.SecuredServiceBehavior">
<serviceMetadata httpsGetEnabled="true" httpsGetUrl="securedmex" />
<serviceDebug includeExceptionDetailInFaults="true"/>
<serviceCredentials>
<userNameAuthentication
userNamePasswordValidationMode="Custom"
customUserNamePasswordValidatorType="WcfSecurityService.MyValidator, WcfSecurityService"/>
<serviceCertificate
findValue="CN=MyRSARootCA_LocalHost" storeLocation="LocalMachine" storeName="My"
x509FindType="FindBySubjectDistinguishedName" />
</serviceCredentials>
</behavior>
</serviceBehaviors>
</behaviors>
<bindings>
<wsHttpBinding>
<binding name="WcfSecurityService.TransportMsgBinding">
<!-- UsernameToken over Transport Security -->
<security mode="TransportWithMessageCredential">
<message clientCredentialType="UserName"/>
</security>
</binding>
<binding name="WcfSecurityService.UnsecuredBinding">
<security mode="None"></security>
</binding>
</wsHttpBinding>
</bindings>
<services>
<!--
<service name="WcfSecurityService.Service"
behaviorConfiguration="WcfSecurityService.ServiceBehavior">
<host>
<baseAddresses>-->
<!--<add baseAddress="http://localhost/WcfSecurityService/" />-->
<!-- SvcUtil.exe need Cassini Server (not IIS)-->
<!--<add baseAddress="http://localhost:8002/WcfSecurityService/" />
</baseAddresses>
</host>
<endpoint address=""
binding="wsHttpBinding"
contract="WcfSecurityService.IService"
bindingConfiguration="WcfSecurityService.UnsecuredBinding">
<identity>
<dns value="localhost"/>
</identity>
</endpoint>
<endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange"/>
</service>-->
<service name="WcfSecurityService.SecuredService"
behaviorConfiguration="WcfSecurityService.SecuredServiceBehavior">
<host>
<baseAddresses>
<!--<add baseAddress="https://localhost/WcfSecurityService/" />-->
<!-- SvcUtil.exe need Cassini Server (not IIS)-->
<add baseAddress="https://localhost:8003/WcfSecurityService/" />
</baseAddresses>
</host>
<endpoint address="https://localhost:8003/WcfSecurityService/"
binding="wsHttpBinding"
contract="WcfSecurityService.IService"
bindingConfiguration="WcfSecurityService.TransportMsgBinding">
<identity>
<dns value="localhost"/>
</identity>
</endpoint>
<endpoint address="securedmex" binding="mexHttpsBinding" contract="IMetadataExchange"/>
</service>
</services>
...

SSL Certificate bindings:
-------------------------
IP:port : 0.0.0.0:8003
Certificate Hash : d321b6f1d2c4085f36ebbd51e72a3dc3e2332589
Application ID : {4dc3e181-e14b-4a21-b022-59fc669b0914}
Certificate Store Name : MY
Verify Client Certificate Revocation : Enabled
Verify Revocation Using Cached Client Certificate Only : Disabled
Usage Check : Enabled
Revocation Freshness Time : 0
URL Retrieval Timeout : 0
Ctl Identifier : (null)
Ctl Store Name : (null)
DS Mapper Usage : Disabled
Negotiate Client Certificate : Enabled