It's a simple run of certbot (or acme.sh) depending on how things are configured.

Literally less than 30 seconds in a terminal to update the cert and restart the webserver....just need an admin with access to do that.

The real question is why webdiplomacy doesn't redirect to https by default. Seems like a simple rewrite rule in the apache config...