Project: 6838fdca-639a-4eed-98ce-2a621fc6106c (production)

Two custom domain certs have been stuck in CERTIFICATE_STATUS_TYPE_VALIDATING_OWNERSHIP

for 15+ hours, certificates: [] empty:

- app.instabeautybot.com (web) customDomain ce779d55-8d07-4a8a-b65a-19f8ec997915

- webhook.instabeautybot.com (webhook-ingress) customDomain c4236dbb-e445-40bf-a96d-6ca6c0ff1d3a

Both are subdomains, not apex — so CNAME flattening is not a factor.

DNS verified from my side:

- Cloudflare, DNS-only (gray cloud), not proxied

- Railway API reports DNS_RECORD_STATUS_PROPAGATED, currentValue == requiredValue

- dig +short app.instabeautybot.com returns the Railway target directly

- HTTP-01 path reachable: curl http://app.instabeautybot.com/.well-known/acme-challenge/x

returns from server: railway-edge (Fastly)

- No CAA records on the zone

I attempted one delete+recreate on webhook yesterday (may have hit an LE

rate limit); have not retried since to avoid compounding it.

Could you kick the cert-issuer for these two domains?