
Cannabis COA Explained: How to Read Your Lab Results

A cannabis COA (certificate of analysis) is the lab report behind the label on your product. It shows what a licensed, independent laboratory found in a sample of your batch: how much THC and other cannabinoids, which terpenes, and whether it passed contamination tests. Read it in four moves: match the batch number, check the lab, find total THC, and confirm every safety panel says pass.
TL;DR
- A COA only counts if its batch or lot number matches the one on your package.
- Total THC is not THCA plus delta-9 THC added together. Use THCA × 0.877, then add delta-9 THC.
- Every safety panel (pesticides, heavy metals, microbials, mycotoxins, and residual solvents for extracts and vapes) should read pass.
- A COA is a snapshot of one tested sample, not a promise about how a product will affect you.
- Red flags: a QR code that opens the wrong file, missing dates, mismatched lot numbers, or panels marked “not tested.”
Table of Contents
- What a cannabis COA is and why it exists
- Step 1: Make sure the COA matches your product
- Step 2: Scan the safety panels first
- Step 3: Read the cannabinoid profile
- Step 4: Check the terpenes
- How closely should the label match the COA?
- Red flags on a cannabis COA
- What a COA can and can’t tell you
- Our perspective
- Order lab-tested cannabis delivered in Alameda County
- FAQ
- Sources
What a cannabis COA is and why it exists
A COA is an official document produced by an accredited, third-party laboratory after it tests a cannabis sample. The Mississippi Medical Cannabis Program explains that it typically includes a cannabinoid profile plus screening for pesticides, heavy metals, microbes, and mycotoxins. The New Jersey Cannabis Regulatory Commission describes it as a document that gives information on a product’s safety, quality, and potency.
In California, where we deliver, testing is not optional. The Department of Cannabis Control says all batches of cannabis goods must be tested before sale, and the COA must state whether the batch passes or fails for each substance. Labs cannot change a COA after issuing it without the department’s permission.
Think of the label and the COA as a pair. The label is the short summary, and the COA is the full report. One guide puts it well: a label can’t hold a whole lab report, and a COA means nothing if you can’t tie it to the jar in your hand, with the batch number as the link.
Step 1: Make sure the COA matches your product
This is the step most people skip, and it matters most. A perfect report for a different batch tells you nothing about the one you bought.
Compare these details against your package:
- Product name and sample description. If the COA shows a different product type than the one you hold, treat it as a mismatch even when the THC number looks close, as one consumer guide on fake COAs advises.
- Batch or lot number. California regulation requires that, for products already packaged when sampled, the batch number on the package matches the batch number on the COA.
- Lab name, report ID, and license details. A real report names the laboratory and gives an identifier you can reference.
- Dates. Look for when the sample was collected, received, and reported. Illinois’s state guide notes that the header, with its serial number, sample ID, and collection, received, and reported dates, helps verify the data is legitimate.
If your package has a QR code, scan it. It should open a report for your batch, not a generic page.
Step 2: Scan the safety panels first
Potency gets the attention, but safety comes first. The safety section tests for things you do not want to inhale or eat. Per New Jersey’s guidance, microbial threats such as E. coli and Salmonella must show a pass, heavy metals such as lead and mercury are checked against limits, pesticides must not have illegal residues, and extracts and vapes are tested for residual solvents like butane and ethanol.
Here is what each panel is looking for:
| Panel | What it checks | What you want to see |
|---|---|---|
| Pesticides | Residues from crop treatments | Pass, no illegal residues |
| Heavy metals | Lead, mercury and similar | Pass |
| Microbials | Bacteria such as E. coli and Salmonella, plus mold | Pass |
| Mycotoxins | Toxins produced by mold | Pass |
| Residual solvents | Leftover extraction solvents in extracts and vapes | Pass |
Why heavy metals? Cannabis is a bioaccumulator, so it can absorb metals such as lead or nickel from soil, water, or processing environments. That is the reason the screening exists.
Pass means no regulated contaminant was detected above the established limit. If you want to go deeper on the pesticide panel, we wrote a guide to cannabis pesticide testing in California.
A panel marked “not tested” for a product type that normally needs it is worth noticing. So is a report where every line reads ND (not detected) with no method notes or limits shown, which one COA red-flag checklist lists among its warning signs.
Step 3: Read the cannabinoid profile
The cannabinoid section lists the concentration of each cannabinoid. THC and THCA are the main ones; CBD and CBDA are the non-psychoactive counterparts, and you will often see CBG, CBC, and CBN as well, according to New Jersey’s guidance.

Why raw cannabis lists THCA
In raw flower, most of the THC is present as THCA, an acid form. Heat (smoking, vaping, baking) converts it to THC. That is why a flower COA may show a large THCA number and a small delta-9 THC number. The figure that predicts what you will actually get is total THC.
How to calculate total THC
The formula is Total THC = delta-9 THC + (0.877 × THCA). The 0.877 factor accounts for the weight lost when THCA converts. Colorado’s potency rules use the same factor, defining total THC as THCA × 0.877 plus delta-9 THC and a few other THC variants.
Two worked examples:
- A sample showing 20.00% THCA and 1.00% delta-9 THC: 20.00 × 0.877 = 17.54, plus 1.00 gives 18.54% total THC.
- A sample showing 22.4% THCA and 0.6% delta-9 THC comes to about 20.2% total THC. Adding the two numbers directly would give 23.0%, overstating potency by nearly three points.
If the COA’s total THC doesn’t line up with your own math, that is a reason to look closer. We go further on this in why THC percentage misleads.
Percentages versus milligrams
One percent equals 10 milligrams per gram of material, so 20% THCA is 200 mg/g, as Hytiva’s lab report guide explains. Flower and concentrates usually use percentages. Edibles use milligrams.
For edibles, separate the per-serving amount from the package total. A package with 100 mg of THC split into 10 servings has 10 mg per serving. Concentrates run far higher than flower, often 60 to 90%, while edibles are measured in milligrams per serving rather than percentages. Our comparison of concentrates versus flower walks through how to size a dose across formats.
Step 4: Check the terpenes
The terpene section is optional on many reports, but it tells you about aroma and likely character. New Jersey’s guide lists myrcene (associated with relaxation), limonene (uplifting citrus), pinene (alertness), and caryophyllene (which may have anti-inflammatory properties) among the common ones.
Terpene numbers are useful for comparing two products you are deciding between. They do not replace the safety panels. For more on how terpenes show up on a COA and in your vape settings, see our terpene guide for Alameda County.
How closely should the label match the COA?
Labels and COAs rarely match to the decimal, and regulations allow a margin. In California, a claimed cannabinoid, total THC, or total CBD figure is not considered inaccurate when the COA differs by plus or minus 10.0%. So a label of 24% THC and a COA of 22.5% is within tolerance.
Other states set different margins. Colorado, for instance, allows plus or minus 15% for claims of 2.5 mg per serving or more. Always apply the rule of the state where the product was sold.
Research shows why reading the COA, not just the label, is a good habit. A 2023 peer-reviewed study of Colorado flower found average measured potency of 14.98%, well below the label values. A 2025 preprint reported that flower had a median gap of 4.3 percentage points between label and measured THC, while edibles were much closer, off by a median of 1.3 mg. Those findings come from Colorado, not California, but the lesson carries: the COA for your own batch is the number to trust.
Also expect some lab-to-lab variation. One explainer notes that potency testing can differ by roughly 3 to 5 percentage points between accredited labs, so a small difference between two reports on the same product is not alarming by itself.
Red flags on a cannabis COA
A quick scan catches most problems. Watch for:
- No lab accreditation listed (ISO/IEC 17025 is the standard to look for), or one that looks expired.
- A missing batch or lot number, product name, or dates.
- A QR code that opens a generic page, or one that goes to a Google Drive PDF or random file host.
- A report date earlier than the sample’s received date, or every date identical.
- Strain names changing mid-report, mismatched lot numbers, or fonts and spacing that shift partway down the page.
- Unusually high THC with suspiciously round decimals.
Age matters too. Some states set COA expiration periods, commonly around 12 months from issuance for products that haven’t shipped yet, because potency and microbial status can change in long storage. Vape buyers have an extra reason to be careful, and we put together eight COA checks for spotting fake vape cartridges.
What a COA can and can’t tell you
A COA records what a laboratory found in a tested sample. It lets you compare the label to the measured contents. It cannot tell you exactly how a product will affect you, and it is not a medical recommendation, as Hytiva’s guide puts it.
It is also a snapshot. The test describes the sample at the time it was collected and tested, and does not track changes during later storage. That is why the date and a fresh, sealed package matter alongside the numbers.
If you are new to cannabis, start with a low dose, wait to feel the full effect, and talk to your doctor if you take medication or have a health condition. Potency figures tell you strength, not how your body will respond.
Our perspective
We think a COA should be something you can actually use, not a document you file away. Most buyers never open one, and that is a missed opportunity, because the batch number on your package is the easiest way to confirm what you are about to consume.
That is why we run a curated menu instead of an endless one. We work with trusted California brands such as STIIIZY and Buddies, and we care about batch consistency, so that the product you reorder behaves like the one you liked the first time. Everything we deliver comes through a legal supply chain, with lab results you can verify.
Our drivers know Alameda County, from Oakland and Berkeley to Fremont, so the product reaches you quickly and discreetly. Our advice to every customer: match the batch, find total THC, check that every panel says pass, and ask us if anything looks unclear.
Jake
Order lab-tested cannabis delivered in Alameda County
If you are 21 or older and in Alameda County, we deliver licensed, lab-tested flower, pre-rolls, vaporizers, concentrates, edibles, and accessories to your door, same day. Browse the full menu on our menu page, then check the batch number on what arrives against its lab results.

Ready to order? Start your same-day delivery order. For more help with labels and strains, see our guide to reading cannabis labels and the rest of the Green On The Go cannabis blog.
FAQ
What does total THC mean on a COA?
Total THC is the amount of THC you can expect once the product is heated. It is calculated as delta-9 THC plus 0.877 times THCA. For example, 20% THCA and 1% delta-9 THC gives 18.54% total THC.
How do I know a COA is real?
Start with the batch number: it must match your package. Then check the lab name and accreditation, confirm the dates make sense, and scan the QR code to see that it opens a report for your batch. Mismatched lot numbers, broken QR links, or shifting fonts are warning signs.
Does a failed result ever show up on a COA?
Labs report fail results, and in California each substance on the COA is marked pass or fail. Illinois, for example, states that legally purchased products there will not have a failed result on the COA. If you ever see a fail on a product being sold to you, do not use it.
Is the THC on the label always the same as on the COA?
Not exactly. Regulations allow a tolerance. In California it is plus or minus 10.0% of the label figure. Small differences are normal, but a big gap or a total THC that does not match the THCA math deserves a closer look.
Can a COA tell me how a product will feel?
No. It reports what was measured in a sample. Effects depend on your body, your tolerance, the dose, and how you consume it, so start low and go slow.
Sources
- New Jersey Cannabis Regulatory Commission: Cannabis Testing Guidelines and How to Read a Certificate of Analysis
- Mississippi Medical Cannabis Program: Understand a COA
- California Department of Cannabis Control: Testing laboratories
- Illinois Department of Agriculture: How to Read a COA
- California Code of Regulations Title 4, section 15726
- California Code of Regulations Title 4, section 15724
- Colorado Medical Marijuana Bureau industry bulletin 22-03
- Commercial Cannabis Product Testing: Fidelity to Labels (PMC)
- Uncomfortably high: Testing reveals inflated THC potency (PMC)
- Hytiva: Reading Cannabis Lab Reports
- OpenCOA: Learn About COAs
- Cannabis Insider Hub: How to Read a Cannabis Label and COA
- Mary Jane’s Post: Fake cannabis COAs, the quick checks
- USAWeed: How To Read a COA, Cannabis Lab Reports and Red Flags
- LegalClarity: How to Read a Cannabis Certificate of Analysis
- ZenWeedGuide: Cannabis Lab Testing
Recommended
Ready to order?
Licensed, same-day cannabis delivery across Oakland, Berkeley, Fremont and all of Alameda County.
Order Online