All of your custom domains are missing their TXT ownership verification records. While the CNAME records are correctly propagated for the www subdomains, each domain also requires a TXT record for verification. For example, for www.ashishpunj.com you need a TXT record at _railway-verify.www.ashishpunj.com, and for root domains like albertpunj.com you need one at _railway-verify.albertpunj.com. The required token values for each are shown in your domain settings. Certificates will not issue until both the CNAME and the TXT verification records are in place.