Credit card entry is not secure, goes to https secure page after entering credit card

Do I have something set up incorrectly? The credit card entry page is not secure - does not have the lock icon & has a regular http address, after I enter the card and click continue checkout, the next page is an https secure page with the lock icon. Is this correct behavior? Thank you.