Hi — our www custom domain has been stuck at "validating ownership" since it was

added on 7 September, and the certificate never issues. Both DNS records are in

place and resolving correctly.

Project: 72a52313-2ae6-46dd-94f0-c8aca58c1ea8 (production)

Service: 76ef1cc4-988c-452f-bf09-7d7f26441fcb

Domain ID: 64132ed4-d8d3-4dd5-abac-afeb00d3dd54

Domain: www.backofthebox.co.uk (created 2026-09-07 12:01 UTC)

railway domain status www.backofthebox.co.uk --json still shows today (17 Sept):

• CNAME www -> qk59r257.up.railway.app — status PROPAGATED, currentValue matches
• verification.verified: false
• certificate.status: CERTIFICATE_STATUS_TYPE_VALIDATING_OWNERSHIP

The TXT record at _railway-verify.www has been resolving since about 18:00 UTC on

14 September, with the exact token Railway shows:

railway-verify=4b904965ba753441323579160f50a5cbe05a78678fe4e0ebe0efe163de80e80e

Confirmed on Namecheap's authoritative nameservers (dns1/dns2.registrar-servers.com),

Google 8.8.8.8, Cloudflare 1.1.1.1, and over DNS-over-HTTPS from both. TTL 1799.

Our apex domain backofthebox.co.uk, on the same service with the same setup,

verified and has a valid certificate.

Ruled out:

• No CAA record on backofthebox.co.uk; railway.app's CAA allows letsencrypt.org
• Negative caching: SOA minimum is 3601s, long expired

Tried:

• Waited over 70 minutes after adding the TXT; status briefly showed ISSUING

  around 30 minutes in, then went back to VALIDATING_OWNERSHIP

• railway domain certificate retry refuses: "only available after certificate

  issuance fails"

• railway domain update www.backofthebox.co.uk --port 8080 (same port) at

  19:33 UTC on 14 September — updatedAt changed, no progress in the three days since

www currently serves the *.up.railway.app certificate, so browsers show a

warning. Could you re-run ownership verification for this domain, or let us

know what's blocking it? Thanks.