Your CNAME and TXT verification records for www.topflightoptical.com are both correctly configured and propagated. The domain is verified, but the SSL certificate is stuck in the ownership validation phase. Since your DNS is managed by Wix, Wix may be interfering with the Let's Encrypt HTTP challenge needed to issue the certificate. If Wix is serving its own site on the root domain or redirecting traffic, that can block our certificate issuance. You can try adding a CAA record allowing Let's Encrypt (0 issue "letsencrypt.org") in your Wix DNS settings, or if possible, temporarily stop any Wix site from serving on that domain so the validation can complete.

Unassigned my site from Wix, and re-added on Railways, still the same issue.

Your CNAME record currently points to the old Railway target, but after re-adding the domain, a new target was generated. You need to update your CNAME record for www.topflightoptical.com in your Wix DNS settings to point to the new target shown in your domain settings on Railway.

Still the same

Hey,

Sorry about that. We have rolled out a fix for this. Your domains should automatically get issued a certificate. If they don't, please remove and re-add the domain.