While a secure server certificate is not required, it is a very good idea. If you do not have a secure certificate, visitors to your order forms will receive a warning each time they attempt to checkout. To process credit cards you first need a credit card merchant account with a bank. Every bank has different requirements for approving merchants and the application process varies. The process can take several weeks.
Many banks also require an application fee.
If you have a product like software that is delivered in realtime, you might want to consider a credit card processor which authorizes cards as soon as orders are submitted. There are a number of companies offering this service, including Cybercash, AuthorizeNet, Cambist and others. Signing up for the realtime processing service. Developing a web site compatible with the processor's software. MMA can help guide you through the setup process and install the necessary software like Cybercash's MCK Cash Register Gateway on your virtual server account.