Thanks for your feedback. I was able to use the apple codesign utility to verify that the signature on the app appears to be correct, but I will see if I can get a refund. That output includes the sha1 and sha256 hashes, is it acceptable to post them here in the hope that someone with an official copy can verify them?
