Your CNAME record for api.axisoverlay.com is resolving correctly in public DNS, but our internal system still detects it pointing to a previous Railway target instead of the expected one, which is why the certificate is stuck in "Validating domain ownership" and your SSL isn't working. This mismatch typically resolves with DNS propagation, but if it persists, try removing and re-adding the custom domain in your service settings to force a refresh.

How long could I give it at most before turning to another solution?

To be honest, I really moved around a lot today, and I think I messed everything up, haha. How long should I wait before I start worrying?

DNS propagation typically completes within a few hours, though it can occasionally take up to 48 hours. Your public DNS is already pointing to the correct target, so our internal system should catch up soon. If it's still stuck after 24 hours, try removing and re-adding the custom domain in your service settings to force a refresh.

Great, thank you very much. Can I update this forum after the deadline for submitting the update?

Yes, feel free to reply here anytime with an update. As of now, your CNAME in public DNS is correctly pointing to the expected target, but our internal system still sees a previous target, which is why the certificate is stuck on "Validating domain ownership." Since public DNS is already correct, removing and re-adding the custom domain in your service settings now would likely force our system to pick up the correct record and unblock the certificate.

my problem has been resolved, thank you very much ❤️