how comes your SSL cert is for *.herokuapp.com ? is this legit?
yes. it runs on heroku
PPS: also what happens if the TX of the payment takes longer than 48h due to pools not picking the TX up? that should be covered by the FAQ
It is covered: "Each unpaid order or unverified payment will be cancelled automatically 48 hours from the time of placing the order." When you pay the proper fee, the TX should be picked soon.