SSL Certificate Issuance Issue for Custom Domain: n8n.min8n.com Dear Railway Support Team

bstsoni
HOBBY

6 days ago

I hope this message finds you well.

I am trying to set up a custom domain, n8n.min8n.com, for my n8n service hosted on your platform. I have followed the recommended steps:

  1. I have configured a CNAME record in my DNS provider (Hostinger) for n8n.min8n.com to point to fpbmaooz.up.railway.app. I have verified the propagation, and it appears to be correct.

  2. My CAA records for min8n.com explicitly allow certificate issuance by letsencrypt.org.

  3. In my service's settings panel on Railway, under the domains section, the status for n8n.min8n.com is displayed as "Metal Edge · Issuing TLS certificate".

  4. This status has remained for "since yesterday" without the certificate being successfully issued. Consequently, I cannot access my service via HTTPS on the custom domain (I receive a secure connection error).

  5. The environment variables N8N_HOST (n8n.min8n.com) and WEBHOOK_URL (https://n8n.min8n.com/) are also correctly configured in my n8n service.

Could you please investigate why the SSL certificate is not being issued for n8n.min8n.com? I can provide my project/service ID if needed: 49e38b32-9bad-4c25-bb0c-7142fe81411a

Thank you in advance for your help and prompt response.

Best regards,
Boris

Solved

1 Replies

angelo
EMPLOYEE

5 days ago

Thanks for reaching out — and for the detailed breakdown, it’s very helpful.

The reason the TLS certificate is still pending for n8n.min8n.com is likely due to a DNS configuration issue. Railway relies on DNS validation to issue certificates, and in some cases, providers like Hostinger may cache or proxy DNS records in a way that interferes with Let’s Encrypt’s validation process. That and Hostinger doesn't support CNAME flattening.

To resolve this, we recommend switching your domain’s nameservers to Cloudflare, which we’ve found to work reliably with Railway’s automatic TLS issuance. Here’s what you’ll need to do:

  1. Create a Cloudflare account (if you haven’t already).

  2. Add your domain (min8n.com) to Cloudflare.

  3. Update your nameservers at Hostinger to point to the ones provided by Cloudflare.

  4. In Cloudflare’s DNS settings:

  5. Wait a few minutes for propagation and refresh the domain status in your Railway dashboard.

Once Cloudflare is managing the DNS and the CNAME record is set correctly, our platform should be able to issue the TLS certificate within a short window.

Let us know once that’s set up or if you need any help during the process — happy to take another look.

Status changed to Awaiting User Response railway[bot] • 5 days ago

Status changed to Solved bstsoni • 5 days ago