**Problem:** * Added two custom domains to vibx-app: `client.digital` and `*.client.digital` * DNS is configured with two different Railway targets: * `client.digital` CNAME → `wqrcr8u2.up.railway.app` * `*.client.digital` CNAME → `5935a20t.up.railway.app` * Railway shows `*.client.digital` stuck in "Certificate Authority is validating challenges" * Service config shows three Railway-generated domains but none match either DNS target **Expected:** Both custom domains should resolve to the same Railway endpoint (one service = one endpoint) **Actual:** Domains pointing to two different Railway endpoints; certificate validation failing **Request:** Please clarify the correct single CNAME target for both `client.digital` and `*.client.digital` on vibx-app, or investigate why domain addition assigned mismatched targets.

Certificate Authority is validating challenges

manojmobo

PROOP

a month ago

Problem:

Added two custom domains to vibx-app: client.digital and *.client.digital
DNS is configured with two different Railway targets:
- client.digital CNAME → wqrcr8u2.up.railway.app
- *.client.digital CNAME → 5935a20t.up.railway.app
Railway shows *.client.digital stuck in "Certificate Authority is validating challenges"
Service config shows three Railway-generated domains but none match either DNS target

Expected: Both custom domains should resolve to the same Railway endpoint (one service = one endpoint)

Actual: Domains pointing to two different Railway endpoints; certificate validation failing

Request: Please clarify the correct single CNAME target for both client.digital and *.client.digital on vibx-app, or investigate why domain addition assigned mismatched targets.

$20 Bounty

4 Replies

Railway

BOT

a month ago

This thread has been marked as public for community involvement, as it does not contain any sensitive or personal information. Any further activity in this thread will be visible to everyone.

Status changed to Open Railway • 29 days ago

0x5b62656e5d

MODERATOR

a month ago

Your client.digital is currently pointing to a Fastly IP address. If your CNAME was set up correctly, it should be pointing to a Cloudflare IP address.

I'd check to make sure you don't have any conflicting A/AAAA/CNAME records on your root domain.

manojmobo

PROOP

a month ago

I have pointed both .client.digital and client.digital to ptjndstu.up.railway.app , still the ssl for .client.digital says Certificate Authority is validating challenges

0x5b62656e5d

MODERATOR

25 days ago

Try removing the domains from Railway and readd them.

manojmobo

PROOP

25 days ago

We have tried this several times.

Welcome!