SSL Certificate Provisioning Stuck - Custom Domains Delayed
pssantosh
HOBBYOP

a month ago

Project ID: a6c48868-44d9-45dd-ac37-a9be2b3dee41 Environment: production (df8ab2a3-71ff-4435-b18a-292c9ce0e467) Service: Frontend Dashboard Link:https://railway.com/project/a6c48868-44d9-45dd-ac37-a9be2b3dee41?environmentId=df8ab2a3-71ff-4435-b18a-292c9ce0e467

Issue: SSL certificate provisioning for custom domains is stuck and taking significantly longer than expected. The process has been ongoing for 30+ minutes with no progress.

Affected Domains:

  • twai.co.in (Port 8080)
  • www.twai.co.in (Port 8080)

Current Status:

  • twai.co.in — Stuck at "Certificate Authority is validating challenges"
  • www.twai.co.in — Stuck at "Validating domain ownership"

Related Request IDs:

  • mS3RtzxpSw6dqNovmrpb1w
  • bV4rZeLuSvWmG34t-8Y8hA

What's Not Working:

  • Certificate Authority validation stuck for 30+ minutes
  • No progress since domain ownership validation
  • Browser shows "not secured" even though dashboard shows green tick for www.twai.co.in

Steps Already Taken:

  • Waited 60+ minutes for automatic provisioning
  • Verified DNS resolution is correct
  • Confirmed backend domain works fine
  • Checked service is running and responding

Expected Behavior: SSL certificates should be provisioned within 5-10 minutes of domain verification.

Requested Action: Please manually investigate and resolve the SSL certificate provisioning for both domains. This is blocking production access to the application.

Solved

3 Replies

Railway
BOT

a month ago

Your www.twai.co.in domain has a valid certificate and is fully working. However, twai.co.in (the root/apex domain) is currently pointing to A records (15.197.225.128, 3.33.251.168) instead of the required CNAME to e43zd3g8.up.railway.app, which is why the certificate is stuck. Your DNS provider appears to be GoDaddy (domaincontrol.com nameservers), which does not support CNAME flattening at the apex. You will need to either switch your domain's nameservers to a provider that supports CNAME flattening (such as Cloudflare) or set up an ALIAS record if your provider supports it. See our root domain documentation for details.


Status changed to Awaiting User Response Railway about 1 month ago


pssantosh
HOBBYOP

a month ago

even the www.twai.co.in when i visit it shows not secure


Status changed to Awaiting Railway Response Railway about 1 month ago


chandrika
EMPLOYEE

a month ago

The certificate for www.twai.co.in is valid and fully provisioned on our end. If you're seeing "not secure," make sure you're navigating to https://www.twai.co.in specifically, not twai.co.in (the root domain still points to non-Railway servers and has no valid certificate). Try opening https://www.twai.co.in in an incognito/private window to rule out browser cache from earlier attempts.


Status changed to Awaiting User Response Railway about 1 month ago


Status changed to Solved pssantosh about 1 month ago


Welcome!

Sign in to your Railway account to join the conversation.

Loading...