Every legitimate cannabis or research chemical product should come with a Certificate of Analysis (COA) — a document from a third-party laboratory verifying what is actually in the product. But here is the problem: most people have no idea how to read one. A COA is not just a piece of paper with a percentage on it. It is a technical report with chromatograms, tables, abbreviations, and pass/fail criteria that require interpretation.

This guide walks you through a real COA section by section. By the end, you will know how to verify potency, spot contaminants, read a chromatogram, and identify fake lab reports from a mile away.

Anatomy of a COA: The Visual Breakdown

Below is a simplified mockup of what a typical COA looks like. Each labeled section corresponds to a critical piece of information you should verify before trusting any product.

LAB

Certificate of Analysis

Third-Party Laboratory Report

Product Name
Delta-9 THC Distillate
Batch / Lot #
D9-2026-0847
Sample ID
S-247AVL-091
Date Tested
Aug 28, 2026
Lab Name
GreenLeaf Analytics, LLC
License #
C8-0000123-LIC
Potency Results
Delta-9 THC
94.7%
Delta-8 THC
1.2%
CBN
2.1%
Total Cannabinoids
98.3%
HPLC Chromatogram

Peak at 6.42 min = Delta-9 THC | Peak at 5.18 min = Delta-8 THC | Peak at 8.91 min = CBN

Δ8-THC Δ9-THC CBN Retention Time (min) Intensity
Residual Solvents
PASS — ND
Pesticides
PASS — ND
Heavy Metals
PASS
Microbials
PASS — ND

Signed: Dr. J. Martinez, PhD | Date: Aug 29, 2026 | Lab Director

Decoding the Abbreviations

COAs are full of shorthand that can confuse even experienced buyers. Here is a quick-reference table of the most common abbreviations you will encounter.

AbbreviationFull TermWhat It Means
NDNot DetectedThe compound was tested for but found below the detection limit
NTNot TestedThis panel was not analyzed for this sample
LOQLimit of QuantitationThe lowest amount that can be reliably measured
LODLimit of DetectionThe lowest amount that can be detected (but not precisely quantified)
ppmParts Per MillionMicrogram of contaminant per gram of product (1 ppm = 1 μg/g)
ppbParts Per BillionNanogram per gram — used for ultra-trace contaminants like mycotoxins
CFU/gColony Forming UnitsMeasure of microbial contamination per gram
HPLCHigh-Performance Liquid ChromatographyMethod used for potency and pesticide testing
GC-MSGas Chromatography-Mass SpectrometryMethod used for residual solvents and terpenes
ICP-MSInductively Coupled Plasma MSMethod used for heavy metal detection
qPCRQuantitative PCRMethod used for microbial DNA detection
COACertificate of AnalysisThe document you are reading right now

Understanding the Six Test Panels

A comprehensive COA covers six distinct testing areas. Each uses different instrumentation and has different pass/fail thresholds. Here is what each panel actually tells you.

📊
Potency
HPLC quantifies THC, CBD, and minor cannabinoids. Look for total cannabinoids above 95% in distillate.
🌿
Pesticides
LC-MS/MS screens 60+ chemicals. All must be ND or below action limits. No exceptions.
🦠
Microbials
Tests for E. coli, Salmonella, Aspergillus, and total mold. Distillate should pass easily.
⚗️
Heavy Metals
ICP-MS detects arsenic, cadmium, lead, mercury. Cannabis bioaccumulates metals from soil.
💨
Residual Solvents
GC-MS finds leftover butane, ethanol, propane. Limits set by FDA Q3C guidance.
☠️
Mycotoxins
LC-MS/MS screens for aflatoxins and ochratoxins — toxic mold byproducts measured in ppb.

How to Spot a Fake COA

Fake COAs are more common than you think. Unscrupulous vendors copy real reports, change product names, or forge lab logos entirely. Here is how to tell the difference.

No Lab License NumberEvery legitimate testing lab has a state-issued license. If the COA does not list one, it is not from a real lab.
Verify the LabCall the lab directly using the phone number on their official website — not the COA. Ask them to confirm the sample ID and batch number.
Generic or Missing ChromatogramA real COA includes chromatograms or spectra. A single number with no supporting data is meaningless.
Cross-Check DatesThe sample date, test date, and report date should make logical sense. A sample collected yesterday cannot have a month-long microbial test completed today.
Pixelated or Copied SignaturesReal COAs have actual signatures or digital certificates. A blurry stamp or obviously pasted signature is a forgery red flag.
Match the Batch NumberThe batch number on the COA must match the batch number on your product packaging. Mismatches mean the COA was copied from another product.

Why COAs Matter for Concentrates

Here is a fact most consumers do not realize: concentration magnifies contamination. A cannabis flower with 100 ppm of a pesticide might be below legal limits. But when that flower is processed into distillate, the same 100 ppm becomes 1,000 ppm because everything except cannabinoids is removed. The contaminant stays. The plant matter goes.

This is why distillate and concentrate COAs are stricter than flower COAs. And it is why a vendor selling "95% pure" distillate without a full panel COA is asking you to trust them with your health. Do not.

The AOAC International sets the gold-standard analytical methods for cannabis testing, and their standards are adopted by most state regulatory frameworks. When a lab says they follow "AOAC methods," it means their procedures have been validated against the most rigorous protocols in the industry.

Reading Between the Lines

Sometimes what a COA does not say is as important as what it does. Here are subtle tricks vendors use:

  • Selective testing: A COA that shows potency but skips pesticide or solvent panels. They are hiding something.
  • Old dates: A COA from six months ago for a "fresh batch." Testing degrades over time, especially for volatile compounds.
  • Vague product names: "Cannabis extract" instead of "Delta-9 THC Distillate (Batch D9-2026-0847)." Specificity matters.
  • Rounding up: A potency of 89.4% rounded to "90%+" in marketing. The COA shows the truth; the label shows the lie.
  • Missing minor cannabinoids: If a distillate claims 98% THC but the COA only shows 85% total cannabinoids, the remaining 13% is mystery oil.

The Bottom Line

A Certificate of Analysis is not optional paperwork. It is the only objective proof of what you are actually buying. Learning to read one empowers you to cut through marketing claims and hold vendors accountable.

At 247AVL Plug, we provide full-panel COAs for every batch of THC distillate, every vial of ketamine, and every research chemical we stock. We list batch numbers. We name the testing lab. We include chromatograms. And we encourage you to verify — because transparency is not a feature, it is the minimum standard.

If a vendor cannot or will not provide a COA, the question is not whether their product is clean. The question is what they are hiding.