How to Read a Cannabis Certificate of Analysis (COA): The 2026 Buyer's Guide

Every legal cannabis product you've ever bought came with a Certificate of Analysis — a third-party lab report documenting exactly what's in the jar, cart, or package. Most consumers never look at it. That's a mistake. A COA is the single best tool you have for verifying potency, avoiding contaminated products, and understanding what a strain will actually do to you. This guide walks through what a Certificate of Analysis is, how to read every section, and the red flags that separate a trustworthy product from one you should walk away from.

What a Certificate of Analysis Is (and Isn't)

A Certificate of Analysis is a laboratory report produced by an accredited, independent cannabis testing facility. It documents the results of a battery of tests performed on a specific batch or lot of cannabis product. In every U.S. legal-cannabis state, COAs are legally required before product can be sold at retail, and dispensary staff are required to make them available on request.

A COA is not a marketing document. It's not a quality score, and it doesn't tell you whether a particular strain will be a good fit for you personally. It's a factual record: here's what this batch tested for, here's what it actually contained. The job of a consumer is to translate those numbers into informed buying decisions.

Hemp-derived CBD products, delta-8 products sold outside licensed cannabis channels, and gray-market products often have COAs too — but the testing standards are wildly inconsistent. A COA from a dispensary in a licensed state carries regulatory weight; one from a random CBD website may or may not.

Section 1: The Header — Match the COA to the Product

The top of any COA contains the basic identifying information: product name, brand, batch or lot number, the date the sample was collected, the date testing was completed, and the name of the licensed laboratory that conducted the analysis. This is boring and also essential. If you're holding a jar of flower, the batch number on that jar must match the batch number on the COA. If they don't match, the COA doesn't apply to what you're holding.

Also check the date. In most states, flower must be tested within a window prior to retail sale (typically six to nine months). A COA from a year and a half ago applied to flower sold today is a red flag — cannabinoids degrade, especially THC converting to the less-potent CBN, and the product in the jar is likely less potent than the COA claims.

Laboratory accreditation matters here too. Look for ISO/IEC 17025 accreditation or state-specific licensing (e.g., California's DCC-licensed labs). A test report from an unaccredited "lab" carries no regulatory weight.

Section 2: The Cannabinoid Profile — More Than Just THC

The cannabinoid profile is the section most consumers skip to first, and for good reason — this is where potency lives. You'll typically see a table listing:

• THC and THCA (the latter converts to THC when heated)
• CBD and CBDA
• Minor cannabinoids: CBG/CBGA, CBN, CBC, THCV
• Total THC (usually calculated as THCA × 0.877 + THC)
• Total CBD (similar conversion math)

Flower typically tests between 15 and 30 percent total THC in most legal markets. Concentrates can run 60 to 90 percent. Edibles are labeled in milligrams per serving and per package.

"Total THC" is the number that matters for potency — it accounts for the THCA that converts to THC when you actually smoke, vape, or dab the product. THCA alone, without heat, is non-intoxicating, which is why high-THCA flower sold through hemp-adjacent loopholes has been controversial.

Minor cannabinoids are increasingly what distinguishes premium products. A flower with meaningful CBG (cannabigerol) or CBN (cannabinol) content often has more nuanced effects than a pure THC-dominant product. For medical users, specific cannabinoid ratios (1:1 THC:CBD, 2:1 CBD:THC, CBD-dominant) matter far more than raw THC percentage.

Section 3: The Terpene Profile — The Real Flavor Map

If a COA has a terpene panel, read it. Terpenes are the aromatic compounds that give each strain its smell, flavor, and a significant portion of its felt effects. Two strains can have identical THC percentages and produce completely different experiences because their terpene profiles differ.

Common terpenes you'll see:

• Myrcene — earthy, musky; the most abundant terpene in most cannabis; associated with relaxed, sedating effects
• Limonene — citrus; associated with uplifting, mood-elevating effects
• Pinene — pine; associated with alertness and counteracting short-term memory effects of THC
• Caryophyllene — peppery, spicy; unique among terpenes for binding to CB2 receptors; associated with anti-inflammatory effects
• Linalool — floral, lavender; associated with calming, sedating effects
• Humulene — hoppy, earthy; also found in hops and sage
• Terpinolene — fresh, herbal; often dominant in sativa-leaning cultivars

Total terpene content matters: premium flower typically tests at 2-4 percent total terpenes, while low-quality flower may test below 1 percent. A "high-THC" strain with low terpene content will almost always underdeliver on experience compared to a more moderate-THC, high-terpene product.

Section 4: Contaminant Testing — The Section That Actually Matters

The cannabinoid and terpene sections are fun. The contaminant testing section is the one that could actually hurt you if someone skipped it. Four categories show up on every compliant COA:

Pesticides. States test for dozens of pesticides, including bifenthrin, myclobutanil, and spinosad. "Myclobutanil in particular" has a specific concern: when heated (as when smoked or vaped), it produces hydrogen cyanide. A 2024 University of Colorado Boulder study highlighted the continued presence of prohibited pesticides in illicit and some legal cannabis products, making this section non-optional reading.

Heavy Metals. Arsenic, cadmium, lead, and mercury are the core panel. Cannabis is a hyperaccumulator plant — it pulls metals out of soil and concentrates them. Outdoor flower grown in contaminated soil can test above allowable limits even when grown organically. This is also a particular concern for vape cartridges, where metals can leach from cheap hardware.

Microbials. Total yeast and mold, E. coli, Salmonella, and Aspergillus species. Flower stored in humid conditions can grow mold that doesn't burn off during smoking. Aspergillus in particular is a pathogen of concern for immunocompromised users and for anyone who dabs or vaporizes at low temperatures that don't denature it.

Residual Solvents. Only relevant for concentrates. Butane, propane, ethanol, and other extraction solvents must fall below state-specific thresholds. A BHO (butane hash oil) product with elevated residual butane is a clear pass-on.

Every state publishes action limits for each analyte. Your COA will usually show the measured level next to the action limit, with a PASS or FAIL flag. Any FAIL should have prevented the product from reaching retail. If you see a FAIL on a product for sale, something has gone wrong — either in testing, remediation, or regulatory oversight.

Section 5: Red Flags to Walk Away From

New Jersey's Cannabis Regulatory Commission published an educational guide that highlights common COA red flags, and consumer advocates have compiled their own lists. Watch for:

• Missing contaminant testing. If a COA only shows cannabinoids and no pesticides, metals, or microbials — walk away.
• THC/CBD variance greater than 10 percent from label claim. If the jar says 24 percent THC and the COA says 18 percent, someone is either sloppy or lying.
• No lab accreditation listed. Regulated labs put their credentials on every report.
• A report date more than six to nine months old on flower. Cannabinoid degradation is real.
• Remediated products presented as original. Some states allow microbial remediation (e.g., gamma irradiation) that technically brings a failed batch into compliance. This is a quality call — many consumers prefer to avoid remediated flower.
• Mismatched batch numbers. If the batch on the package doesn't match the batch on the COA, the COA is irrelevant.

How to Actually Use a COA When You're Shopping

Most dispensaries either have COAs available by QR code on packaging or will pull them up on request. For flower, focus on total THC, terpene profile, and contaminant panels. For edibles, verify total THC and serving-size dosing. For concentrates, prioritize residual solvents and heavy metals. For vape cartridges, the metals panel is especially important.

If a budtender can't or won't produce the COA for a product, that's your answer. Walk away.

Key Takeaways

• A Certificate of Analysis (COA) is a third-party lab report required on every legal cannabis product, documenting cannabinoids, terpenes, and contaminants.
• Match batch numbers between the COA and the product you're holding — if they don't match, the COA doesn't apply.
• Total THC is the potency number that matters; total terpene content often predicts the quality of the experience better than THC alone.
• The contaminant panel (pesticides, heavy metals, microbials, residual solvents) is the most consequential section for safety.
• Red flags include missing contaminant testing, stale report dates, unaccredited labs, and THC/CBD variance greater than 10 percent from label claim.

Explore cannabis news, find dispensaries, and join the community at Budpedia.