It would be great if Let’s Encrypt were set up to generate certificates with onion sites so the above situation does not happen. I understand that https with onion routing is not strictly necessary, but the error warning is potentially confusing to new users.
[See also: Manually verifying certificat for access over TOR and Let's encrypt]