May I ask have you had Always Use HTTPS and/or Automatic HTTPS Rewrites options enabled too?
Try disabling both of them.
I’d suggest you to disable SSL for the particular sub-domain with Page Rules.
Therefrom, HTTP-only would work as expected with the supported port.
Maybe, there is a catch, if the SSL option executes before Page Rules.
If so, then you’d have to disable SSL completely under the SSL tab for the zone.
Afterwords, creating Page Rule(s) to enable SSL on your example.com and just in case create a 2nd one to disable SSL on subdomain.example.com.
Personally, I use HTTPS everywhere which is why I am not 100% sure and writing the above suggestion.