This is normal for apt, but I didn't always know that.  It's confusing for users who may misjudge the security of the distro.

Here's what I see from Firefox: 

I'm not suggesting a change -- but I am sympathetic to those feeling troubled by this.  File under "https is a pain and it's not the only way to secure things".

[edit: To explain the above quote, DNS round robin came up with ftp.fau.de in this case, which correctly doesn't have a cert for deb.devuan.org.  sledjhamr has a cert.

But have I misunderstood OP's concern?  Was the concern that deb.devuan.org redirected to sledjhamr.org instead of sledjhamr.org/devuan/  ?  In that case, is the concern about equal for redirecting to ftp.fau.de instead of ftp.fau.de/devuan/ ?

Some mirrors are foo.blah.tld/ and some are foo.blah.tld/devuan.  Apt must be handling that automatically.
]