Custom domain SSL certificate never issued after 1 week — no CAA blocking, DNS verified
andersurroca-max
HOBBYOP

a month ago

Hi, I have a custom domain (oryonmentor.com and www.oryonmentor.com) attached to my service "Oryon" (project "Oryon", production environment) that has never successfully provisioned an SSL certificate, despite DNS being correctly configured for over a week now.

What I've verified:

www.oryonmentor.com CNAME correctly points to the target Railway gave me.

The _railway-verify TXT record is correctly set for both oryonmentor.com and www.oryonmentor.com (confirmed via public DNS lookup, e.g. 8.8.8.8).

No CAA record exists on the domain that could block Let's Encrypt.

Certificate Transparency logs (crt.sh) show zero certificates have ever been issued for this domain.

The domain status in the Railway dashboard has shown "Waiting for DNS update" continuously for about a week with no change.

Could you check on your end why certificate issuance for this domain seems stuck, and manually retry it if needed? Happy to provide the project ID or any other details you need.

$10 Bounty

2 Replies

Railway
BOT

a month ago

This thread has been opened as a bounty so the community can help solve it.

Status changed to Open Railway about 1 month ago


Your DNS records seem to be set up correctly. If a certificate isn't issued by Railway within a day, try to remove your custom domain and all its related DNS records, wait for 10 - 15 minutes, and add it again.


Also, just to make sure. Check if you have a parking page enabled, and disabled it. Remove any conflicting A records that might exist on your root domain (oryonmentor.com).


Welcome!

Sign in to your Railway account to join the conversation.

Loading...