Custom domain stuck at ISSUING / Verified no despite correct DNS
matsuzawa169
FREEOP

2 hours ago

Hi Railway team,

Our custom domain lumixell.sfree.jp is stuck in the certificate issuance process and is not becoming verified.

Current Railway CLI status:

  • Domain: lumixell.sfree.jp
  • Domain ID: eb7402a0-870d-43bc-82c1-a2bb65e13758
  • Type: custom
  • Target port: 8080
  • Sync status: ACTIVE
  • Verified: no
  • Certificate status: CERTIFICATE_STATUS_TYPE_ISSUING

Affected Railway project:

  • Project: Lumixell
  • Project ID: 3a35e443-396b-43ba-b8e3-5656577edba6
  • Environment: production
  • Service: web
  • Service ID: 7140ee88-4325-408a-92b4-c60390cf346a
  • Workspace: sfree0331's Projects
  • Railway service URL: https://web-production-45b16.up.railway.app/

The required DNS records are correctly configured on the currently authoritative DNS zone.

CNAME:

  • lumixell.sfree.jp → czu33oon.up.railway.app

The Railway verification TXT record is also configured correctly.

We have confirmed that both the CNAME and TXT records are publicly resolvable from multiple DNS servers, including:

  • Authoritative DNS: ns-rs1.gmoserver.jp
  • Google Public DNS: 8.8.8.8
  • Cloudflare DNS: 1.1.1.1

We have also confirmed:

  • No CAA record is configured
  • No DNSSEC DS record is configured
  • The CNAME resolves to the Railway-provided target
  • The Railway verification TXT record resolves correctly from public DNS

The custom domain was originally created on 2026-07-01, but the correct DNS records were configured later on the currently authoritative DNS zone.

Despite the DNS now being correct, Railway continues to show:

Verified: no

Certificate status: CERTIFICATE_STATUS_TYPE_ISSUING

We also tried:

railway domain certificate retry lumixell.sfree.jp

However, Railway reports that certificate retry is only available after certificate issuance has FAILED. Since the current status remains ISSUING, we are unable to manually retry the certificate issuance.

Could you please check whether the domain verification / certificate issuance workflow is stale or stuck, and trigger a server-side re-verification or certificate re-issue if necessary?

We would prefer not to remove and re-add the custom domain unless that is required.

Additional account / Service selector information:

I am logged in as Hiroki Matsuzawa (dev@oneclever.co.jp).

The affected project belongs to the workspace:

sfree0331's Projects

I have access to the Lumixell project, and Railway CLI confirms that the project, production environment, and web service are linked correctly.

However, the affected service does not appear in the Technical Help Service selector.

I tried searching by both:

  • Service name: web
  • Service ID: 7140ee88-4325-408a-92b4-c60390cf346a

but the selector shows "No options".

Therefore, I selected N/A in the Service field even though this issue is directly related to the Railway service specified above.

Please let me know if you need any additional diagnostic information.

Thank you.

Awaiting User Response

1 Replies

Status changed to Awaiting Railway Response Railway about 1 hour ago


sam-a
EMPLOYEE

32 minutes ago

Your DNS records are correctly configured: the CNAME and TXT verification record both match what we expect. We have started a certificate re-issuance for this domain, which should complete within a few minutes. No need to remove and re-add the domain.


Status changed to Awaiting User Response sam-a 32 minutes ago


Welcome!

Sign in to your Railway account to join the conversation.

Loading...