← All breakdowns

A certificate has to pass three gates. Buyers check one.

Most documents that cause trouble are genuine. They were issued to a real company, for a different product, and the scope is the part nobody reads.

A certificate gets checked once, usually by looking at a PDF. The PDF is the least reliable part of the document, because a PDF proves only that somebody can operate a printer.

Three gates, not one

Three gates a certificate has to pass First the certificate must exist at the issuing body. Second its scope must cover the product you are buying. Third it must still be valid on the date you ship. Buyers usually check the first gate and stop Gate 1 Does it exist? number resolves at issuer Gate 2 Does it cover you? scope names your product Gate 3 Is it valid now? on your ship date, not today Most fake documents fail at gate 1. Most real documents that still cause problems fail at gate 2 — a genuine certificate, issued to someone else, for a different product. Gate 3 is the one that bites six months later, when the renewal lapsed between order and shipment.

Gate 1 is the one everyone does: does the number resolve. Gate 2 is where genuine documents fail — a real ISO certificate issued to a real company, for a scope that does not include what you are buying. Gate 3 catches the quiet case: valid when you asked for it, expired before you shipped.

What each common certificate actually says

What common certificates do and do not prove ISO 9001 proves a management system exists, not that the product conforms. CE is a self-declaration for many directives. FCC covers electromagnetic interference. RoHS restricts substances. FDA registration is not an approval. Five certificates buyers over-read Certificate Proves Does not prove ISO 9001 a management system exists this product is good CE mark directive requirements met a lab tested it (often) FCC emissions limits electrical safety RoHS restricted substances, that batch future production FDA registration a facility filed paperwork any product approval Each of these is a real requirement and each is routinely presented as something broader than it is.

Three of these caught buyers repeatedly. ISO 9001 certifies that a quality management system exists and is followed — it says nothing about whether the specific product is good. CE for many product directives permits the manufacturer to self-declare, so no notified body was involved and no independent test exists unless you ask for one. FDA registration is a facility listing; it is not an approval of any product, and buyers regularly treat the number as one.

How to check, specifically

The distinction worth keeping

A certificate is evidence about a system, or about a sample at a moment. It is never evidence about the unit in your container. The document tells you the factory has been organised to produce consistently; it does not tell you that it did, on your order, last week.

That gap is what an inspection closes, and it is the reason a certificate and an inspection are not substitutes for one another.

None of this means certificates are worthless. It means they answer a narrower question than the one buyers ask them. The narrow question is worth answering properly — three gates, ten minutes, no cost.

Certificate scope is one of the 32 audit checkpoints

An audit checks the number against the issuing body and the scope against what you are actually buying.

Send a supplier to check