This is the normal behavior of web servers. either enable SSL and let#s encrypt for all sites or use a different IP address for sites with - and without SSL.