Your custom domain's DNS is correctly configured, but the TLS certificate has hit a Let's Encrypt rate limit, which occurs when too many certificate requests are made for the same domain in a short period (often from repeatedly removing and re-adding the domain). This limit blocks new certificate issuance for up to 7 days, after which Railway will automatically retry and issue the certificate.

I see. However, I can't wait up to 7 days. Can you check exactly how long is left?

The rate limit is enforced by Let's Encrypt, not by us, so we don't have visibility into the exact time remaining. The maximum window is 7 days from when the limit was triggered, and once it clears, the certificate will be issued automatically with no action needed on your end.