Custom domain www.altmbr.com will not validate — stuck on "Waiting for DNS update"

for 1.5+ hours, blocking cert issuance.

Service/domain:

• Domain: www.altmbr.com
• Custom domain id: a84ecb49-b98e-45e2-9915-ce8a14097f3b
• Service: web (project: altmbr, env: production)
• Required target: y0el5q4s.up.railway.app, port 8080

DNS is confirmed correct and globally propagated:

• www.altmbr.com → CNAME → y0el5q4s.up.railway.app (single record, no conflicts;

  authoritative ANY query returns only the CNAME)

• Identical result from Google (8.8.8.8), Cloudflare (1.1.1.1), Quad9 (9.9.9.9),

  and OpenDNS (208.67.222.222)

• _railway-verify.altmbr.com TXT present and matching

• No CAA records blocking Let's Encrypt

• Railway edge (server: railway-edge) is already serving traffic for the hostname;

  it just serves the *.up.railway.app wildcard cert because no per-domain cert was issued

Already tried:

• Full delete + re-add of the custom domain (generated the new y0el5q4s target;

  updated GoDaddy CNAME to match; re-add did NOT clear the "Waiting for DNS update" state)

• Re-saving the domain / port edit

Railway status page shows TLS/Let's Encrypt at 100% — no incident. This appears to be a

wedged validation/cert order on a single domain. Please force a re-validation / re-issue

server-side, or advise.