Fixed! The issue was that port 443 was mapped in the Tor hidden service config, and when Tor Browser tried HTTPS, it got the SSL certificate for m.nosmero.com instead of the .onion address.

Tor hidden services don't need HTTPS because Tor already provides end-to-end encryption.

Thanks for finding the bug!