You may want to use the final version of the ACME protocol: RFC 8555. It was published as an RFC 5 years ago 
Although it doesn't matter for the account thumbprint, as, besides a typo, sections 8.1 are identical.
Correct, as it can be calculated from the (public) key of the account key.
Incorrect. It's calculated.
How are you calculating your thumbprint?