Apex domains cannot have CNAME records.
Question and response
Question
dig cert.at. NS
Answer
cert.at. 5 NS sec1.rcode0.net.
cert.at. 5 NS ns5.cert.at.
cert.at. 5 NS sec2.rcode0.net.
cert.at. 5 NS ns5.univie.ac.at.
cert.at. 5 NS ns10.univie.ac.at.
Authority
The response has no authority records.
Additional
ns5.cert.at. 5 A 194.58.198.32
ns5.univie.ac.at. 5 A 193.171.255.77
ns10.univie.ac.at. 5 A 192.76.243.2
sec1.rcode0.net. 5 A 192.174.68.100
sec2.rcode0.net. 5 A 176.97.158.100
ns5.cert.at. 5 AAAA 2a01:3f1:3032:0:0:0:0:53
ns5.univie.ac.at. 5 AAAA 2001:628:453:4305:0:0:0:53
ns10.univie.ac.at. 5 AAAA 2001:67c:133c:0:0:0:0:2
sec1.rcode0.net. 5 AAAA 2001:67c:1bc:0:0:0:0:100
sec2.rcode0.net. 5 AAAA 2001:67c:10b8:0:0:0:0:100
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0