I am running IIS 7 and I host multiple website under one IP address. Each website is configured using host names, so that a visitor ends up at the correct website.
One of the websites uses SSL (for example https://example.mywebsite.com/).
I created a new website, say http://subdomain.contoso.com/ and when I enter that address in my browser, it automatically redirects to https://subdomain.contoso.com and returns an error that the certificate is invalid. Of course it is invalid! The certificate is for a totally different website.
To make things worse, I have another website - http://another.mywebsite.com/ and that website is running correctly.
Now my question is: What makes IIS decide to redirect to HTTPS, even when I have it turned off for subdomain.contoso.com. And how do I fix this buggy behaviour?