Actually, it might be the other way around. The problem is really that the authoritative servers are serving (slightly) incorrect DNS.
www.nordicsemi.com. 3600 IN CNAME nordicsemi.nord.aads1.net.
but nord.aads1.net. is answered as NXDOMAIN, meaning there should exist no *.nord.aads1.net at all, according to RFC 8020. At an explicit request for nordicsemi.nord.aads1.net. they return the address, but some resolvers might not ask for that (and rightly so).
So… I think disabling forwarding should make the resolution work in this case, or forwarding to some other resolver that’s liberal with respect to bogus NXDOMAIN on empty non-terminals.