Yes, the checkout pages should be hosted using an SSL certificate to maintain security.
I personally prefer to host the entire store behind the SSL certificate and redirect all http traffic to https so the entire shopping experience is on the secure server.