New
#11
Yeah, it should be OK if you got it from a legitimate source, the COA is a good sign.
Yeah, it can be tough trying to do these things remotely.
If you want to wait for further advice from a security expert, that certainly is an option, although the remote thing may be a bit of a hindrance there too.