Your CNAME and _railway-verify TXT records are both correctly propagated, and we show the domain as verified. However, there is also an A record (192.64.119.216) on harborlog.app that does not belong to Railway and may be conflicting with certificate issuance. You should remove that A record in Namecheap, and also avoid deleting and re-adding the domain as Let's Encrypt enforces rate limits (5 duplicate certificates per domain per week).

Thanks, that worked. Looks like Railway adds that A record automatically and I just ignored it but removing it gets past the "awaiting" problem and the app is now reachable from the domain. Thanks for the quick and effective support!