diff --git a/getssl b/getssl
index a7837db..2c49a82 100755
--- a/getssl
+++ b/getssl
@@ -1629,6 +1629,11 @@ get_auth_dns() { # get the authoritative dns server for a domain (sets primary_n
         # shellcheck disable=SC2086
         out=$($HAS_DIG_OR_DRILL $DNS_CHECK_OPTIONS ${gad_s} NS "${gad_d}")
         res=$(echo "$out"| grep -E "IN\W(NS|SOA)\W")
+        if [[ "$out" == *SERVFAIL* ]]; then
+          debug Output from "$HAS_DIG_OR_DRILL $DNS_CHECK_OPTIONS ${gad_s} NS ${gad_d}" contains SERVFAIL
+          debug "$out"
+          sleep 2
+        fi
         ((i++))
       done
     fi