How to Read a CBD Oil Certificate of Analysis (COA): The Complete Guide

By Jason Amatucci | PureCraft CBD | Updated October 2026

The Certificate of Analysis is the only document that tells you what is actually in your CBD oil — not what the label claims is in it. The CBD market has no mandatory federal testing requirements, which means the difference between a trustworthy product and an inaccurate or potentially harmful one comes down entirely to what the COA shows and whether it holds up to scrutiny. This guide walks you through every section of a CBD COA and tells you exactly what to look for, what's acceptable, and what should disqualify a product.

What Is a Certificate of Analysis?

A Certificate of Analysis (COA) is a document issued by an accredited, independent testing laboratory that reports the results of chemical analysis performed on a specific batch of a CBD product. The operative word is independent — a legitimate COA is produced by a third-party lab with no financial relationship with the CBD brand. In-house testing documents produced by the manufacturer are not COAs; they are internal quality reports with no independent verification value.

A complete CBD oil COA covers some or all of:

• Potency (cannabinoid panel) — how much CBD, THC, and other cannabinoids are present
• Heavy metals — arsenic, cadmium, lead, mercury
• Pesticides — residues from hemp cultivation
• Residual solvents — extraction solvents remaining in the final product
• Microbial contamination — bacteria, yeast, mold, E. coli, Salmonella
• Mycotoxins — fungal toxins (aflatoxin, ochratoxin)
• Terpenes — aromatic compounds (full spectrum products)

Not every COA includes all of these categories — some brands do minimal testing (potency only) while comprehensive brands test for all relevant contaminants. What is present and absent in the COA tells you as much about a brand's quality standards as the test results themselves.

Section 1: Lab Identification and Accreditation

The first thing to check is who ran the test. Look for:

ISO/IEC 17025 Accreditation

ISO/IEC 17025 is the international standard for testing laboratory competence. An accredited lab has been independently audited to verify that its testing methods, equipment calibration, staff qualifications, and result reporting meet internationally recognized standards. In the US, accreditation is typically granted by A2LA (American Association for Laboratory Accreditation), PJLA (Perry Johnson Laboratory Accreditation), or similar accreditation bodies.

The COA should include the lab's accreditation number. You can verify this at the accreditation body's website. A COA from a non-accredited lab has no independent verification of the lab's competence — the results could be accurate or entirely fabricated.

For a closer look at available formats and ingredients, browse Pure Craft broad-spectrum CBD oil.

Lab Contact Information

The lab's name, address, and phone number should appear on the COA. You should be able to look up the lab online and confirm it is a real, operating laboratory. If the lab name brings up no website, no Google Business listing, and no professional presence, treat the document with serious skepticism.

Date of Testing

The COA should include the date the sample was received and the date testing was completed. Legitimate current COAs should be dated within the past 12–24 months and should match the product lot number. A COA dated 3 years ago is not a current quality verification — hemp production batches change, and testing older than the current production run does not characterize what's in your bottle.

Section 2: Sample Identification

This section ties the test results to a specific product batch. Look for:

• Product name and batch/lot number — should match the lot number printed on your product bottle
• Sample source — how the sample was submitted (by the brand, by a retailer, by an independent third party). Third-party-purchased testing is the most credible; brand-submitted testing is still useful but has a lower bar for independence
• Sample size — the amount of product tested; should be sufficient for the analytical methods used

The lot number match is critical. If your bottle has lot number 240815 and the COA on the brand's website shows lot number 230402, that COA is not characterizing your specific product batch. Reputable brands update their COAs with every new production run and maintain a COA archive organized by lot number.

To compare labeled CBD content and ingredients, see Pure Craft CBD oil product details.

Section 3: Cannabinoid Panel (Potency)

This is the most important section for most consumers. It tells you exactly what cannabinoids are present and at what levels.

What Cannabinoids Should Appear

A comprehensive cannabinoid panel typically tests for 10–15+ cannabinoids:

• CBD (cannabidiol) — the primary active compound; should match the label claim
• CBDA (cannabidiolic acid) — the precursor acid form of CBD; present in full spectrum products from incomplete decarboxylation
• THC (Δ9-tetrahydrocannabinol) — the psychoactive cannabinoid; must be below 0.3% by dry weight (federal legal limit for hemp-derived products)
• THCA (tetrahydrocannabinolic acid) — acid precursor of THC; also subject to the 0.3% limit
• CBC (cannabichromene), CBG (cannabigerol), CBN (cannabinol) — minor cannabinoids with their own activity profiles; present in full spectrum and some broad spectrum products
• CBDV (cannabidivarin), THCV (tetrahydrocannabivarin) — less common minor cannabinoids

Verifying Potency Against Label Claims

The label says "1000mg CBD per 30ml bottle." The COA should show approximately 33.3mg/mL of CBD in the tested sample (1000mg ÷ 30ml). Allow for ±10% variation as acceptable — that would put acceptable COA values between 30mg/mL and 36.6mg/mL. Results outside this range indicate either labeling inaccuracy or manufacturing inconsistency, both of which are red flags.

Industry data has shown that a significant percentage of CBD products on the market have CBD content more than 10% different from label claims — both over and under. Products that consistently test within 5% of label claims demonstrate the tightest manufacturing quality control.

If you are exploring an oil format, review Pure Craft broad-spectrum CBD oil before choosing a product.

THC Levels: What's Legal and What's Acceptable

Full spectrum CBD oil: May contain up to 0.3% Δ9-THC by dry weight under the 2018 Farm Bill. The COA should show THC below this threshold. Total THC (accounting for THCA conversion) must also fall below 0.3%.

Broad spectrum CBD oil: Should show THC as ND (not detected) or

CBD isolate: Should show only CBD at or near 99%+ purity. All other cannabinoids, including THC, should be ND.

Section 4: Heavy Metals Testing

Hemp is a bioaccumulator — it absorbs minerals and heavy metals from soil more readily than most crops. This is useful for phytoremediation (cleaning contaminated soil) but means hemp grown in contaminated soil can concentrate heavy metals in the plant tissue and any extract made from it.

You can examine the serving information for Pure Craft CBD oil to understand how this format is labeled.

The four primary heavy metals tested in CBD products are:

• Lead (Pb) — neurotoxin; action limit typically 0.5 μg/g (ppm)
• Arsenic (As) — carcinogen; action limit typically 1.5 μg/g
• Cadmium (Cd) — kidney toxin; action limit typically 0.5 μg/g
• Mercury (Hg) — neurotoxin; action limit typically 3 μg/g

Action limits vary by state; California (Prop 65) has stricter limits than most. All four should ideally show ND (not detected) or values well below established limits. A COA showing all heavy metals as ND is the highest quality result. Results approaching the action limit — while technically "passing" — warrant follow-up questions about source hemp growing conditions.

If a COA does not include heavy metals testing at all, you're missing one of the more significant potential safety data points for a hemp extract product. Hemp grown in the US under USDA organic certification or Good Agricultural Practice (GAP) standards is generally lower risk for heavy metal contamination than uncertified imported hemp.

Section 5: Pesticide Testing

Hemp cultivation increasingly uses pesticides, and some pesticide residues concentrate in hemp extract during the production process (particularly if ethanol or CO₂ extraction is used without solvent washing to remove non-polar contaminants). A comprehensive pesticide panel tests for dozens to hundreds of individual pesticides.

For a closer look at available formats and ingredients, browse Pure Craft broad-spectrum CBD oil.

What to look for:

• Breadth of the panel — a panel testing 10 pesticides is far less comprehensive than one testing 400+. Know what you're looking at before concluding "all clear."
• Results relative to action limits — results are typically compared to California, EU, or AOAC action limits. Any detected pesticide should be compared to the applicable limit, not just reported as "pass."
• USDA Organic certification — if the hemp is certified organic, pesticide risk is much lower by definition, though testing is still best practice

Common pesticides found in non-compliant CBD products include organochlorine and organophosphate compounds. Some are endocrine disruptors or probable carcinogens at sufficient doses. All pesticide results should be ND or well below action limits.

Section 6: Residual Solvents

CBD extraction uses solvents — CO₂, ethanol, butane, propane, hexane, or others — and trace amounts can remain in the final product if post-extraction processing is incomplete. The residual solvents panel checks for these.

To compare labeled CBD content and ingredients, see Pure Craft CBD oil product details.

CO₂ extraction produces no solvent residue by definition (CO₂ is a gas at room temperature and pressure). Ethanol extraction done properly results in very low residual ethanol (typically ND or well below the 5000 ppm action limit). Hydrocarbon solvents (butane, propane) and chlorinated solvents are more concerning and should be ND in any finished consumer product.

Key reference limits (ICH Q3C guideline; Class 2 solvents):

• Ethanol: 5000 ppm limit
• Hexane: 290 ppm limit
• Butane: 50 ppm
• Benzene: 2 ppm (Class 1, should be ND)

Section 7: Microbial Testing

Microbial testing verifies that the product is free from harmful bacteria, yeast, mold, and specific pathogens. Standard microbial tests include:

• Total aerobic count (TAC) — total bacterial load; acceptable limit typically <10,000 CFU/g for dietary supplements
• Total yeast and mold count (TYMC) — acceptable limit typically <100–1000 CFU/g
• E. coli — should be absent/ND
• Salmonella — should be absent/ND in any 25g sample
• Bile-tolerant gram-negative bacteria — should be <100 CFU/g

Microbial contamination is particularly relevant for full spectrum and broad spectrum products that retain plant material components from the extract, and for nanoemulsion products with an aqueous phase. MCT-based CBD isolate products are inherently lower risk for microbial growth due to the absence of water and the antimicrobial properties of medium-chain fatty acids.

If you are exploring an oil format, review Pure Craft broad-spectrum CBD oil before choosing a product.

Red Flags: When a COA Should Concern You

How to Find a Brand's COA

There are several ways reputable brands make COAs accessible:

• QR code on product label — scan to access the current COA for that lot. Fastest and most convenient; should link directly to the relevant lab report, not a generic "testing" page.
• Dedicated COA/lab results page on brand website — searchable by product and lot number. Ideal format for brands with large product portfolios.
• Request by email — any reputable brand should be able to provide the current COA for any product within 24 hours of a request. A slow or evasive response to a COA request is a significant red flag.
• Directly from the lab — some labs (like Leafly Analytics, ProVerde, or Cannalysis) maintain searchable databases of their test results. You can search by sample ID or product name to pull the original lab report.

PureCraft maintains a current COA for every product batch, accessible via QR code on each product label and on our testing page. All testing is conducted at ISO/IEC 17025 accredited laboratories, and we provide potency, heavy metals, pesticides, residual solvents, and microbial testing for every production run.

View PureCraft's nano CBD oil with current COA

Terpene Panels: The Optional Extra Layer

Some full spectrum CBD COAs include a terpene profile — a listing of the aromatic compounds present in the extract and their concentrations. Common terpenes in hemp include myrcene, limonene, linalool, caryophyllene, and pinene, among others.

Terpene data is useful for several reasons:

• It verifies that the product is genuine full spectrum (isolated CBD has no terpenes)
• It lets you compare terpene profiles across batches to assess consistency
• Some users target specific terpene profiles for their reported functional effects (e.g., linalool for calming effects, limonene for mood)
• It provides another dimension of product characterization for experienced users

Terpene testing is optional — not having it doesn't disqualify a COA — but its presence is a mark of higher transparency and quality.

You can examine the serving information for Pure Craft CBD oil to understand how this format is labeled.

Understand what full spectrum vs broad spectrum vs isolate means for terpene content

Frequently Asked Questions