...
For generating the HMAC please use SHA256
When generating the Thumbprint (and any other hash) use the HEXADECIMAL representation of the hash.
Certificate formats
The Fayda public certificate will be given to you in PEM format.
When signing your requests you should add your own public certificate in the header of the signature itself (x5c parameter) in x.509 standard