Custom domain SSL certificate stuck — DNS verified, cert not provisioning
mahmoodaljaber-bit
HOBBYOP

a month ago

Custom domain app.multislot.app is stuck — SSL certificate not provisioning.

The app works perfectly on the generated domain (HTTP 200), only the custom

domain cert is failing.

What I've verified on my side:

  • CNAME app.multislot.app → vxq1nkor.up.railway.app (confirmed via dig, propagated)
  • TXT _railway-verify is in place and matches (confirmed via dig)
  • Cloudflare proxy is OFF (DNS only, grey cloud)
  • Cloudflare SSL mode = Full (not Full Strict)
  • No CAA records (confirmed via dig)
  • No stale _acme-challenge records (confirmed via dig)
  • DNSSEC is off
  • Upgraded from Trial to Hobby (custom domain limit message cleared)
  • Redeployed the service after upgrading

openssl still shows the fallback cert: subject=CN=*.up.railway.app

Please re-trigger certificate issuance for this domain from your side.

Project ID: 73e58142-4400-4e25-9a4f-7d85ad460f31

Service ID: 4e83f11b-be23-4eca-addb-111b4cc2d065

Domain: app.multislot.app

Target: vxq1nkor.up.railway.app

Solved

1 Replies

Railway
BOT

a month ago

Two DNS records need updating. The CNAME for your custom domain points at a target from a previous domain entry that no longer exists, which is why the certificate is stuck. The domain entry was recreated at some point (often from applying a staged config change or redeploying from a template), and each creation generates a new target. Update the CNAME to the value currently shown in your service's Settings under Networking. That value is stable as long as the domain entry stays in place. Second, the TXT verification record is placed on the zone root rather than under the subdomain. For a subdomain like app.example.com, Railway expects the record at _railway-verify.app.example.com, not _railway-verify.example.com. Move the TXT record to the correct host so it matches what the dashboard shows, and the certificate should provision once both records are correct.


Status changed to Awaiting User Response Railway • about 1 month ago


Railway
BOT

a month ago

This thread has been marked as solved automatically due to a lack of recent activity. Please re-open this thread or create a new one if you require further assistance. Thank you!

Status changed to Solved Railway • about 1 month ago


Welcome!

Sign in to your Railway account to join the conversation.

Loading...