the problem is the way the ssl transfer has ben implemeted.
You have set the Get Contents From Form Behavior to trigger Before Page Load.
This means it is trying to populate the cart with contents when the cart.php page submits to the checkout page and again when the checkout page posts to itself.
Change the trigger for the Get Cart Contents from form behavior to Button Checkout pressed instead.