The selected DNS servers must be accessible directly, as PKI Hub cannot access them via a proxy.