Apex domains cannot have CNAME records.
Question and response
Question
dig hetzner.com. NS
Answer
hetzner.com. 5 NS ns3.second-ns.de.
hetzner.com. 5 NS ns1.your-server.de.
hetzner.com. 5 NS ns.second-ns.com.
Authority
The response has no authority records.
Additional
ns.second-ns.com. 5 A 213.239.204.242
ns1.your-server.de. 5 A 213.133.100.102
ns3.second-ns.de. 5 A 193.47.99.4
ns.second-ns.com. 5 AAAA 2a01:4f8:0:a101:0:0:b:1
ns1.your-server.de. 5 AAAA 2a01:4f8:0:1:0:0:5ddc:1
ns3.second-ns.de. 5 AAAA 2001:67c:192c:0:0:0:add:b3
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0