You call yourself an innovative payment system when your site is not in a secured environment, this is the first thing any website developer will do if they are going to set up a website you can even get one for free
Certificate was in place and valid, I just needed to enforce https. it would have been nice if you would have checked also the https version before throwing stones.