I get a self-signed cert and when I override to accept it self-redirects (or something like that). The non-TLS version returns a page with the header “Redirecting…” and nothing else (it does not redirect).

It seems they screwed up their setup pretty bad.