Apex domains cannot have CNAME records.
Question and response
Question
dig xssl.net. NS
Answer
xssl.net. 5 NS dns1.xssl.net.
xssl.net. 5 NS dns2.xssl.net.
xssl.net. 5 NS dns3.xssl.net.
Authority
The response has no authority records.
Additional
dns1.xssl.net. 5 A 84.22.166.196
dns2.xssl.net. 5 A 217.194.210.107
dns3.xssl.net. 5 A 109.169.17.173
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0