Yes. That is considered duplicate content. You common URLs you should check for include:
- http://domain.com
- https://domain.com
- http://www.domain.com
- https://www.domain.com
- http://domain.com/index.(extension)
- https://domain.com/index.(extension)
- http://www.domain.com/index.(extension)
- https://www.domain.com/index.(extension)
- http://domain.com/default.(extension)
- https://domain.com/default.(extension)
- http://www.domain.com/default.(extension)
- https://www.domain.com/default.(extension)
I might have missed a few more, but those are the ones I usually look for.
You can review this Google Webmaster Tools article on how to fix duplicate content issues by using 301 redirects, selecting a preferred domain in GWT, using the canonical tag, and more.
Typically, not in all cases, you have an http and https issue because you have a secure page on your website that uses relative links instead of absolute. So when you go from http to signin on an https, from that page all links point to https page versions instead of the http which the visitor came in on.
Hope this helps.
Mike