Rate limits problem

Depends on how you got to install the certificate in the first place. Now you're talking about Tomcat instead of Apache (the use of the apache plugin suggested the use of Apache, so I assumed Apache was indeed the TLS endpoint of your website).

Did you install the certificate manually? Or did you use certbot for that? If you'd use the apache plugin, certbot would reload Apache automatically and thus "installing" the certificate at the same time. If you have used the webroot previously without an installer plugin, such as apache, certbot would have gotten you the certificate, but you would have to install it manually. And when installing it manually, certbot wouldn't know how to "reinstall" the renewed certificate.

So it really depends on how you installed the certificate in the first place.

Also, now your site is answering plain HTTP on port 443 instead of HTTPS...