Apex domains cannot have CNAME records.
Question and response
Question
dig printer.surfsara.nl. NS
Answer
printer.surfsara.nl. 5 NS nsauth1.surfsara.nl.
printer.surfsara.nl. 5 NS nsauth2.surfsara.nl.
Authority
The response has no authority records.
Additional
nsauth1.surfsara.nl. 5 A 145.100.12.242
nsauth2.surfsara.nl. 5 A 145.100.12.243
nsauth1.surfsara.nl. 5 AAAA 2001:610:108:2043:0:0:0:242
nsauth2.surfsara.nl. 5 AAAA 2001:610:108:2043:0:0:0:243
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0