A 301 redirect won't do it, you need to use mod_rewrite. Have a look at #10 on this thread:
http://forum.x-cart.com/showthread.php?t=19284
And FYI, you really should be using
www.domain.com for both http and https. I'd see about getting the ssl cert re-issued.