Custom domain certificate stuck on "Validating Ownership" for 3+ hours — DNS/CAA/DNSSEC all confirmed correct
cloutgenie
PROOP

15 days ago

Project: cleanmerge-hubspot

Service: cleanmerge-hubspot

Custom domain: cleanmerge.jaduno.com (pointing to the service's Railway-generated domain woezhql9.up.railway.app via CNAME)

I added this custom domain roughly 3 hours ago. The certificate status has remained stuck on CERTIFICATE_STATUS_TYPE_VALIDATING_OWNERSHIP the entire time, with no error message. I've followed your SSL troubleshooting guide (docs.railway.com/networking/troubleshooting/ssl) and ruled out every documented cause:

  • DNS propagation: confirmed via the domain-status API (dnsRecords status DNS_RECORD_STATUS_PROPAGATED, currentValue exactly matches requiredValue) AND independently via a public dig CNAME cleanmerge.jaduno.com, which correctly returns woezhql9.up.railway.app.
  • CAA records: jaduno.com already has CAA records explicitly permitting letsencrypt.org (alongside pki.goog and sectigo.com), so Let's Encrypt is not blocked.
  • DNSSEC: not enabled on jaduno.com at all — no DS or DNSKEY records exist, so there's nothing to misconfigure there.

Since DNS, CAA, and DNSSEC are all confirmed correct and it's been stuck well past the "typically within an hour" window your docs mention, could someone look into why issuance isn't progressing for this domain?

Happy to provide any additional diagnostic info needed.

Solved

1 Replies

Railway
BOT

15 days ago

Custom domains require two DNS records: the traffic-routing CNAME (which is correctly in place) and a TXT ownership-verification record. The verification TXT is what is missing here. Add a TXT record at the host _railway-verify.cleanmerge with the value railway-verify=4ba32114db9504efd210de9bb2c4b1f5502ddefbea7068d850fc24b613ae4dd3 (your DNS provider appends the zone automatically). Once that record propagates, verification and certificate issuance resume on their own with no further action needed.


Status changed to Awaiting User Response Railway • 15 days ago


Railway
BOT

7 days ago

This thread has been marked as solved automatically due to a lack of recent activity. Please re-open this thread or create a new one if you require further assistance. Thank you!

Status changed to Solved Railway • 7 days ago


Welcome!

Sign in to your Railway account to join the conversation.

Loading...