When someone intercepts it, the information looks garbled and useless. In addition to turning sensitive information into useless information, the SSL certificate also issues a key that can decode the message.
Only the program or server that has the proper key can turn the useless information back into usable payment information.