Editorial Notice: Top Shelf Mushrooms is an independent publication covering functional mushroom research and education. Nothing on this page constitutes medical advice. These statements have not been evaluated by the Food and Drug Administration. No supplement discussed is intended to diagnose, treat, support, or prevent any disease.
By Top Shelf Mushrooms Editorial Team
Quick Answer: A Certificate of Analysis (COA) is a lab document verifying what’s actually in a specific production lot of a supplement — covering identity, potency, heavy metals, and microbial safety. To read one properly, check that the lot number on the COA matches your bottle, confirm the testing lab is named and accredited, verify heavy metal results sit below the stated limits (not just “passed”), and treat a COA with no lot number, no date, or no named lab as effectively unverifiable, regardless of how official it looks.
Brands increasingly display “third-party tested” and link to a Certificate of Analysis as a trust signal — and it’s a genuine one, when the document actually supports the claim. But a COA is only as useful as its traceability to the specific product you’re holding. A downloadable PDF with impressive-looking tables means very little if it’s testing a different lot than the one on your shelf, or if the brand’s own website displays two different COAs in two different places without reconciling them. This guide walks through what each section of a COA actually verifies, so you can evaluate one yourself rather than taking “third-party tested” as a blanket assurance.
What a Certificate of Analysis Actually Is
A Certificate of Analysis is a report issued by a testing laboratory — ideally independent of the brand selling the product — documenting the results of specific tests run on a specific production lot. It is not a certification of the brand generally, and it is not permanent; a COA covers one batch, identified by a lot number, and a new production run requires new testing to generate a new, valid COA. A COA from 2023 says nothing definitive about a bottle manufactured in 2026, even if the product name and label look identical.
Legitimate COAs typically come from independent, accredited third-party labs rather than the brand’s own in-house testing, since in-house testing carries an inherent conflict of interest. Accreditation bodies like ISO/IEC 17025 exist specifically to verify that a testing lab’s methods and equipment meet a recognized standard — a COA from an ISO/IEC 17025-accredited lab carries more weight than one from an unnamed or unaccredited source.
Identity Testing
Identity testing confirms the product actually contains the species it claims to contain — that a bottle labeled “Lion’s Mane” genuinely contains Hericium erinaceus material rather than a cheaper filler or a misidentified species. This is commonly done via near-infrared (NIR) spectroscopy, which compares the sample’s spectral signature against a reference standard, or via DNA barcoding for more definitive species-level confirmation. A COA reporting identity as “Conforms” or showing an NIR correlation score above a stated threshold (commonly 0.8 or higher) indicates the lab confirmed the material matches what it’s supposed to be. Identity testing is arguably the single most important section on a mushroom supplement COA, since it’s the test most directly answering “is this actually lion’s mane.”
Potency Testing
Potency testing confirms the amount of the labeled ingredient actually present matches the amount claimed on the Supplement Facts panel — a bottle labeled 1,000mg per serving should show a potency result at or reasonably close to 1,000mg, not significantly under- or over-filled. For raw-powder products, potency testing is often straightforward input verification (confirming the correct weight of raw material was used). For standardized extracts, potency testing may also confirm a specific compound percentage, such as a beta-glucan percentage, matches the standardization claim on the label. A COA that reports potency simply as “Passed” without showing the actual measured value is less useful than one showing both the claim and the measured result side by side, since “Passed” could mean anywhere from barely meeting a lenient internal threshold to precisely matching the label.
Heavy Metal Testing
Heavy metal testing checks for lead, mercury, arsenic, and cadmium — four metals that mushrooms, as a biological category, are known to bioaccumulate from soil and growing substrate more readily than many other crops. This makes heavy metal testing especially relevant for mushroom supplements specifically, more so than for many other supplement categories. Results are typically reported via ICP-MS (inductively coupled plasma mass spectrometry), a highly sensitive method capable of detecting metals at parts-per-billion levels, and compared against a stated limit — often expressed either as parts-per-million (ppm) concentration limits or as micrograms per daily dose, depending on the lab’s reporting convention.
When reading this section, check that the reported result is meaningfully below the stated limit, not just technically under it — a result sitting at 95% of the allowable limit is a materially different situation than one sitting at 5% of the limit, even though both would be reported as “Passed.” Also note whether the units match between the claim and the result; a lab reporting in micrograms per dose and a limit expressed in parts-per-million are not directly comparable without a conversion, and a sloppy or inconsistent COA that mixes units without explanation is itself a minor red flag for overall document quality.
Microbial Testing
Microbial testing screens for contamination that could pose a direct food-safety risk: total bacterial or plate count, total yeast and mold count, and specific pathogen screening for organisms like E. coli, Salmonella, and Staphylococcus aureus. Because mushroom material is grown in organic substrate and processed as a dried, ground product, microbial contamination is a legitimate manufacturing risk distinct from the heavy-metal bioaccumulation risk discussed above. A COA reporting specific pathogens as “Absent” or below a stated detection limit (often expressed as <0.1 cfu/g) is the expected, reassuring result; any pathogen reported as present, even at a low level, warrants real caution.
Physical Testing
Two additional tests appear on more thorough COAs, particularly for capsule products: disintegration testing, which measures whether a capsule breaks down within an expected timeframe (commonly measured against USP <2040> standards, with a “not more than 30 minutes” threshold being typical), and weight variation testing, which confirms individual capsules fall within an expected weight range rather than varying wildly from one to the next (commonly measured against USP <2091>). Neither test speaks to ingredient safety or potency directly, but both speak to manufacturing consistency — a product with erratic weight variation between capsules suggests less consistent manufacturing quality control generally, even if the average potency across the batch is correct.
How to Verify a COA Actually Applies to Your Bottle
The single most overlooked verification step is matching the lot number on the COA to the lot number printed on your specific bottle — usually found on the bottom or side of the container, sometimes alongside a manufacture or expiration date. A COA with an impressive, thorough testing panel is only meaningful if its lot number matches what you’re holding; a brand can accurately and honestly publish a rigorous COA for one production run while a different, untested run is what’s actually shipping to customers, whether through oversight or website content simply not being updated when a new batch replaces an old one.
It’s also worth checking whether a brand’s website displays only one COA, prominently and consistently, or whether different pages or sections reference different lab names, different lot numbers, or different dates without explanation. The latter pattern doesn’t necessarily indicate anything sinister — it more commonly reflects stale content that wasn’t updated when a lab or lot changed — but it does mean you should identify which version is current before relying on the specific numbers, rather than assuming the first one you find is the applicable one.
Frequently Asked Questions
What’s the difference between “third-party tested” and having a public COA?
“Third-party tested” is a claim; a public, verifiable COA is the evidence supporting that claim. A brand can accurately state its products are third-party tested while making it difficult or impossible for a customer to actually see the results, in which case the claim exists but can’t be independently checked. A brand that publishes a downloadable COA with a named lab, a lot number, and specific numeric results is providing something meaningfully more verifiable than a brand that simply states “third-party tested” without a linked document. Both situations technically satisfy the marketing claim, but only one gives a buyer something to actually evaluate rather than simply trust.
Should I be worried if a brand’s COA is more than a year old?
It depends on whether the COA’s lot number matches your current bottle. Supplement manufacturing happens in discrete production runs, and it’s entirely normal for a slow-moving product to still be selling inventory from a lot tested over a year ago, provided that lot number is what’s actually on your bottle and the product hasn’t exceeded its stated shelf life. What should raise more concern is a COA with no date at all, since that makes it impossible to judge whether the tested material has any relationship to current inventory, or a situation where the lot number on an old COA clearly doesn’t match a current bottle’s lot number, meaning the displayed COA isn’t actually testing what you’re buying.
Can a brand fake a Certificate of Analysis?
Fabricating a COA outright is possible in principle but would constitute serious regulatory and legal exposure for a brand if discovered, since a fraudulent lab document misrepresenting safety testing is a significantly more serious violation than typical DSHEA labeling disputes. A more common and less dramatic failure mode is a brand publishing a legitimate, real COA that simply doesn’t correspond to current inventory — stale content rather than outright fabrication. Checking that the testing lab is independently verifiable (searchable, with a real accreditation number, rather than an unfamiliar or unsearchable name) and that the lot number matches your bottle addresses the more common failure mode directly, even though it can’t fully rule out deliberate fraud in rarer cases.
Does a good COA mean the supplement will work?
No — a COA verifies identity, potency, and safety from contamination; it says nothing about whether the labeled dose is sufficient to produce a noticeable effect, or whether the ingredient itself is well-supported by research at that dose. A product can have an excellent, fully verified COA and still be labeled at a dose well below what’s been used in published clinical research, as covered in our dose math framework. A COA answers “is this what it claims to be, and is it safe from contamination,” not “is the labeled amount enough to work.” Both questions matter, but they’re answered by different parts of a product evaluation.
For the format distinction that affects what a COA’s potency section is actually measuring, see our powder vs. extract guide. For how labeled doses compare to clinical trial doses once identity and potency are confirmed, see our clinical dose comparison breakdown. For drug interaction and safety considerations beyond documentation verification, see our safety guide.
For what testing documentation should and shouldn’t cost, see our budget supplement verification checklist. To see this framework applied across several raw-powder products at once, see our raw powder comparison guide. And for a worked example of applying this COA-reading framework to a real product’s documentation, including a documented case where two different COAs appeared on the same brand’s official page, see our Double Wood Lion’s Mane review.
This content is for informational and educational purposes only and does not constitute medical advice. Dietary supplements are not intended to diagnose, treat, support, or prevent any disease. Always consult a qualified healthcare provider before starting any supplement regimen.
Leave a Reply