Hi,
that looks good. I just did a quick test with report SSF01. Without including cert and data the response is 251-252 bytes long. This depends on key length but it seems like that is close enough. You can represent 256 bytes in hexadecimal with 128 characters. Do they expect bytes represented in hexadecimal?
Cheers