2 hours ago
Hi Railway team,
Our custom domain lumixell.sfree.jp is stuck in the certificate issuance process and is not becoming verified.
Current Railway CLI status:
- Domain: lumixell.sfree.jp
- Domain ID: eb7402a0-870d-43bc-82c1-a2bb65e13758
- Type: custom
- Target port: 8080
- Sync status: ACTIVE
- Verified: no
- Certificate status: CERTIFICATE_STATUS_TYPE_ISSUING
Affected Railway project:
- Project: Lumixell
- Project ID: 3a35e443-396b-43ba-b8e3-5656577edba6
- Environment: production
- Service: web
- Service ID: 7140ee88-4325-408a-92b4-c60390cf346a
- Workspace: sfree0331's Projects
- Railway service URL: https://web-production-45b16.up.railway.app/
The required DNS records are correctly configured on the currently authoritative DNS zone.
CNAME:
- lumixell.sfree.jp → czu33oon.up.railway.app
The Railway verification TXT record is also configured correctly.
We have confirmed that both the CNAME and TXT records are publicly resolvable from multiple DNS servers, including:
- Authoritative DNS: ns-rs1.gmoserver.jp
- Google Public DNS: 8.8.8.8
- Cloudflare DNS: 1.1.1.1
We have also confirmed:
- No CAA record is configured
- No DNSSEC DS record is configured
- The CNAME resolves to the Railway-provided target
- The Railway verification TXT record resolves correctly from public DNS
The custom domain was originally created on 2026-07-01, but the correct DNS records were configured later on the currently authoritative DNS zone.
Despite the DNS now being correct, Railway continues to show:
Verified: no
Certificate status: CERTIFICATE_STATUS_TYPE_ISSUING
We also tried:
railway domain certificate retry lumixell.sfree.jp
However, Railway reports that certificate retry is only available after certificate issuance has FAILED. Since the current status remains ISSUING, we are unable to manually retry the certificate issuance.
Could you please check whether the domain verification / certificate issuance workflow is stale or stuck, and trigger a server-side re-verification or certificate re-issue if necessary?
We would prefer not to remove and re-add the custom domain unless that is required.
Additional account / Service selector information:
I am logged in as Hiroki Matsuzawa (dev@oneclever.co.jp).
The affected project belongs to the workspace:
sfree0331's Projects
I have access to the Lumixell project, and Railway CLI confirms that the project, production environment, and web service are linked correctly.
However, the affected service does not appear in the Technical Help Service selector.
I tried searching by both:
- Service name: web
- Service ID: 7140ee88-4325-408a-92b4-c60390cf346a
but the selector shows "No options".
Therefore, I selected N/A in the Service field even though this issue is directly related to the Railway service specified above.
Please let me know if you need any additional diagnostic information.
Thank you.
1 Replies
Status changed to Awaiting Railway Response Railway • about 1 hour ago
32 minutes ago
Your DNS records are correctly configured: the CNAME and TXT verification record both match what we expect. We have started a certificate re-issuance for this domain, which should complete within a few minutes. No need to remove and re-add the domain.
Status changed to Awaiting User Response sam-a • 32 minutes ago