I downloaded audacity and put the dmg file into https://md5file.com to see the checksum. The one that https://md5file.com gave me was all lower case, but the one on the audacity website is all upper case. I was not sure if this counts as matching, it’s unclear whether checksums are case sensitive. I contacted someone at malwarebytes (which I have on my mac) to see what they think. This is what malwarebytes said:
“I see you have a question about checksum, the file must be exactly as was as downloaded, if it had lower cases it must be checked with lower cases, if not the file will not match their database.”
While waiting to hear back from malwarebytes I did some research and found this website that seems legit. They say checksums are NOT case sensitive. I’m confused now.