It may take up to a few hours (maybe even a day) for Railway to validate the DNS and issue certificates. If one isn't issued by then, try removing the domain from Railway and add it back after ~10-15 mins. Update DNS records as necessary.

I have done that and waiting a day and it didn't work. Is it different because I am not using a www.? I am using brain.ashfordsky.com as my address

Using www or not shouldn't matter.

Did you readd the domain and wait for a day? Or readd the domain several times during the day?

I re-added it 3x yesterday. But today I'm not touching it. It used to have a "view DNS records" link to see the CNAME and TXT, but that link is gone now. I can wait and see

Avoid adding it multiple times in a row. This can lead to Let's Encrypt's rate limit being enforced on you and you'd need to wait for 7 days for the restriction to pass.

Alright - how do i know if i've hit the limit? should i just wait 7 days at this point?

The dashboard will show an error message if you've reached the rate limit.

Still validating ownership today. I can't see DNS records. How long do I wait before trying something else?

Your URL seems to be routed to a Replit server. Make sure you don't have any conflicting A/AAAA/CNAME records on brain.ashfordsky.com. I'd also try removing the domain from Railway and add it back after ~10-15 mins again after fixing the DNS records.

Yes it was in replit before. I saw one A record that looked conflicting and removed it. I actually can get to brain.ashfordsky.com now but it shows it is not secure. And Railway still shows it is validating ownership

If a certificate isn’t issued within a day, try removing your domain from Railway and add it back after ~10-15 mins. Update DNS records as necessary.