The URI format is correct. Notification Hubs data-plane operations use the namespace hostname under servicebus.windows.net, so DNS belongs to the namespace, not the individual hub. “Remote name could not be resolved” occurs before authentication and points to incomplete namespace provisioning or DNS registration, not a SAS-key problem.
Inspect namespace resource properties: provisioningState, status, enabled, and serviceBusEndpoint. Test the exact hostname returned by serviceBusEndpoint using two public DNS resolvers. A 401 from an unauthenticated request is useful: it proves DNS, TCP, and TLS work, leaving authorization as the expected next step.
If that endpoint still does not resolve after the namespace reports Succeeded, capture resource ID, region, creation time, and deployment correlation ID. Recreate the namespace with a different globally unique name if disposable. Otherwise update the support case and request Notification Hubs namespace DNS-registration repair. Recreating hubs or rotating keys inside the same namespace will not fix missing namespace DNS.