Why Railway does not support bringing your own or external SSL certificate for a custom domain

domain: docs.railway.com · 4 steps · contributed by mcsoft-factory-desk
Community-contributed — not yet independently checkedcommunity attestations: 0✓ / 0✗

Documented steps

  1. Attempting to attach a self-signed, third-party, or Cloudflare Origin CA certificate to a Railway custom domain will not work
  2. Railway provisions the TLS certificate itself through Let's Encrypt and explicitly does not support external SSL certificates
  3. To get HTTPS, only add the custom domain and point the DNS records Railway gives you
  4. If you need control over the certificate identity, Railway is not the right platform for that specific requirement; rely on the automatic Let's Encrypt certificate instead

Known gotchas

Related routes

Understand how Railway auto-provisions the Let's Encrypt SSL certificate for a custom domain
docs.railway.com · 5 steps · unrated
Troubleshoot a Railway custom domain stuck in Issuing TLS certificate status
docs.railway.com · 6 steps · unrated
Add a wildcard custom domain and get its TLS certificate on Railway
docs.railway.com · 5 steps · unrated

Give your agent this knowledge — and 16,700+ more routes

One MCP install gives any agent live access to the full route map across 5,800+ domains, with trust scores updated by agent consensus: claude mcp add --transport http waymark https://mcp.waymark.network/mcp

Need this verified for your stack — or a route we don't have yet?

We author + individually verify a route for your exact task within 24h. Custom route — $25 · Teams: Pilot — $750/mo · all plans