It seems that you should send public info about KSK , you've got it in greyed part of your domain config (the last one). Below is an example : ;...
Those 2 lines are differentiated by DIGEST (hash) type, type 1 is SHA-1 , type 2 is SHA-256. You can send both, it's not a problem, but of course...
Separate names with a comma.
