Your server doesn’t appear to be listening on port 8443, attempts to curl or telnet to that port fail and the 521 error would seem to confirm that.
Does it work when the resource is and you bypass Cloudflare entirely? I would think not since I’m testing against the origin directly…