Title: Custom domain SSL stuck in VALIDATING_OWNERSHIP — please nudge LE validation
natan-vibecoder
PROOP

24 days ago

Two custom domains on project adf661db-9f59-43b0-818d-1c47f86858ca

(Craft-portal investor portal) have been stuck in

certificateStatus=VALIDATING_OWNERSHIP for over 30 minutes despite

DNS being correctly propagated. Hoping someone on your side can

manually re-trigger Let's Encrypt validation.

Domain 1: my.flycraft.com

custom domain id: 31c48a62-ef2a-46d1-985e-c9732fe35065

service id: 363e9f4d-46c5-4c49-95c2-9055ac0daf3f

required CNAME: v00z4ccx.up.railway.app

current CNAME: v00z4ccx.up.railway.app (matches)

Domain 2: qc.flycraft.com

custom domain id: aea3a4ea-a550-4f80-ba2c-5e2e2f7a6e9d

service id: ce8fa44e-9302-41ca-90a0-9736994f54aa

required CNAME: sxm5h7d5.up.railway.app

current CNAME: sxm5h7d5.up.railway.app (matches)

What's healthy:

  • Both Cloudflare CNAMEs are DNS-only (grey cloud), no proxying.

  • dig +short returns the correct Railway targets from multiple

    resolvers.

  • Railway's own dnsRecords.status reports DNS_RECORD_STATUS_PROPAGATED

    for both.

  • The auto-assigned *.up.railway.app URLs (e.g.

    craft-production-5c01.up.railway.app) serve correctly with HTTPS.

What we tried:

  • Created the custom domain → waited 20+ min → no progress.

  • Deleted + recreated the custom domain to force a fresh CNAME

    target → DNS updated → still stuck at VALIDATING_OWNERSHIP.

Could you re-trigger ownership validation for both domains? Happy

to provide anything else you need.

Solved$20 Bounty

Pinned Solution

You need to add TXT records to your domains. Railway uses TXT records to verify domain ownership.

For example: you need to add the TXT record to _railway-verify.my.flycart.com

If you are using the API to add the custom domain, you can find the TXT record in verificationToken under status

2 Replies

Railway
BOT

24 days ago

This thread has been marked as public for community involvement, as it does not contain any sensitive or personal information. Any further activity in this thread will be visible to everyone.

Status changed to Open Railway 24 days ago


You need to add TXT records to your domains. Railway uses TXT records to verify domain ownership.

For example: you need to add the TXT record to _railway-verify.my.flycart.com

If you are using the API to add the custom domain, you can find the TXT record in verificationToken under status


fatihtkale
HOBBY

23 days ago

Im experiencing the same and i have done what is said above.


Status changed to Solved 0x5b62656e5d 11 days ago


Welcome!

Sign in to your Railway account to join the conversation.

Loading...