How to Verify a Supplier Certificate

Why this matters

When a part's markings are thin, a supplier often fills the gap with paper: a certificate of conformance, a lab test report, a mill certificate, a listing certificate, a calibration certificate. Paper is easy to make. A PDF can be edited in a minute, a real report can be reissued under a different company's name, and a genuine certificate for one product can be attached to the shipment of another. The shops that get burned are not careless. They received a document that looked official, filed it, and installed the part.

A certificate is part of the part. If it is false, the part is unverified, however good the document looks. This article is how to check one with the people who supposedly issued it. Each step is followed by what happened in one real-shaped case, so the steps and their results sit side by side.

The case this article follows

A plumbing and water heater shop has a backorder on its usual temperature and pressure relief valves (T&P valves), the valve that opens to stop a water heater from building pressure and temperature to the point of a tank explosion. The regular supplier offers a substitute brand it has not carried before, and to reassure the shop, sends a PDF titled "Certificate of Compliance" and a second PDF titled "Test Report." The shop needs 12 valves for jobs over the next two weeks. The general handling of a backorder substitute belongs to How to Handle a Supplier Substitution on a Backorder; this article covers only the paper.

Step 1: Name what the document is, and what it can and cannot prove

Different documents prove different things, and the most common mistake is reading one kind as another:

Document Who issues it What it proves
Certificate of conformance (CoC) The manufacturer or seller That the issuer states the goods meet a named specification. A claim, not a test.
Test report A testing laboratory That a specific sample passed specific tests on a specific date. Says nothing about later production.
Listing or certification A certification body That the product was tested and the factory is under ongoing follow-up. Lives in the certifier's directory, not on paper.
Mill test report The mill Chemistry and mechanical properties of a specific heat or lot of material. Ties only to parts marked with that heat number.
Calibration certificate A calibration lab That a specific instrument, by serial number, was checked against standards on a date.
Declaration of conformity (CE and similar) The manufacturer The manufacturer's own declaration. Self-issued.

Why first: a test report, even a genuine one, cannot do the job of a listing. One sample passing once does not mean the valves in this box were made the same way. If the code or your rule requires a listed part, no test report satisfies it.

In the case: the "Certificate of Compliance" is issued by the substitute brand's importer and states that the valves "comply with" the relevant relief valve standards. That is a self-issued claim. The "Test Report" carries the letterhead of a testing laboratory. Neither is a listing. For a water heater relief valve, plumbing codes generally require the valve to be listed to the applicable relief valve standard (ANSI Z21.22 / CSA 4.4) and, in many editions, rated under the ASME boiler and pressure vessel code; the IPC carries this in Section 504, as adopted by your jurisdiction. So the real question is not whether these papers are genuine. It is whether the valve is listed, and the papers are at best a lead.

Step 2: Read the document for internal consistency

Before calling anyone, read it the way a forger hopes you will not:

  • Does the product named match the product in hand, exactly, by model number and variant? A report for a 3/4 inch valve does not cover a 1 inch one, and a report for model "-100" does not cover "-100A".
  • Does the company named match the brand, the importer or the manufacturer of what you received?
  • Is it dated and is it current? A test report from many years ago may predate a design change. A calibration certificate has a due date.
  • Do the numbers belong together? Report numbers, dates, page counts ("page 3 of 7" on a two-page document), signatures and the standard's edition should all agree with each other.
  • Has the PDF been edited? Mismatched fonts on one line, a name that sits slightly off the baseline, or a logo that is a low-resolution image pasted into a crisp page are all worth noting. None proves forgery on its own.

In the case: the test report names the laboratory, a report number, a test date about six years ago, and a model number that differs from the one cast on the valve bodies by one trailing letter. The client named on the report is a different company from the importer that issued the CoC. The page footer reads "Page 2 of 14" on a two-page PDF. Two inconsistencies (the model letter and the page count) and one open question (whose report this is), any one of which would justify Step 3.

Step 3: Find the issuer independently

Do not use the phone number, email address or web link printed on the document. If the document is forged, those may lead to the forger. Find the issuer yourself: the testing laboratory or certification body through its own website found by searching its name, through an accreditation body's directory, or for a US certification through OSHA's list of Nationally Recognized Testing Laboratories.

Laboratories that issue test reports worth trusting are usually accredited to ISO/IEC 17025, and certification bodies to ISO/IEC 17065, by an accreditation body that publishes a searchable directory of who it has accredited and for what scope. An issuer that cannot be found anywhere but on its own letterhead is a finding in itself.

In the case: the laboratory exists, is accredited, and lists a general inquiries line and a report-verification email address on its own website, different from the contact details on the PDF.

Step 4: Ask the issuer to confirm the specific document

Contact the issuer and ask a narrow question: did you issue this report number, on this date, to this client, for this product? Most reputable labs and certifiers verify their own documents on request, though some only confirm or deny without discussing the content, and some only discuss it with the client named. Send the document; do not describe it.

OFFICE: I'm calling to verify a test report we received
        from a supplier. Report number ending 4471,
        dated six years ago, valves. Can you confirm
        you issued it?
LAB:    I can confirm or deny issue. What client name
        and model does it show?
OFFICE: The client named is a valve company. The model
        on the report ends in -100.
LAB:    We issued that number to that client for -100.
        Different date, and it was eight pages. I can't
        speak to other models.
OFFICE: Can I email you the copy we have so you can
        compare it?
LAB:    Send it to the verification address on our site.

Why it works: the issuer is the only party who can say whether the document is theirs, and the narrowest question is the one they can answer without breaching a client's confidentiality.

In the case: the lab confirmed it issued that report number, to the client named, for model -100, on a different date and with eight pages. It declined to comment on the -100A model on the valve bodies. So the report is real in origin and altered in date and page count, and even unaltered it would describe a different model. The shop now knows the paper was edited after it left the lab.

Step 5: Check the listing directly, regardless of the paper

Go to the certification body's online directory and search the manufacturer and the exact model on the part. This is the step that settles a listed-part question, and it does not depend on any document the supplier sent. The method is covered in How to Check a Listing Before You Buy an Unfamiliar Product.

In the case: no listing for the -100A model under the brand or the importer in the directories of the certifiers that list relief valves. The valve bodies carry a pressure and temperature rating but no certifier's mark and no ASME marking. That settles it independently of Steps 2 to 4: the valves do not meet the shop's rule or the code, even if the report had been perfect.

Step 6: Match the paper to the physical part

Where a document is genuine, it still has to belong to what you received. A mill certificate belongs to parts marked with its heat number. A calibration certificate belongs to one serial number. A CoC belongs to a lot. Check that the identifier on the document appears on the part, the tag or the packaging.

In the case: this step became moot at Step 5, but it would have mattered if the shop had been verifying a genuine listing certificate: listing certificates for a product family do not prove a particular unmarked part belongs to that family.

Step 7: Decide, record and tell the supplier

Write down the documents received, what each claimed, who you contacted, what they said, and the listing search result with the date. Then decide.

In the case: all 12 valves were rejected and quarantined with the documents attached, under The Suspect Counterfeit Quarantine SOP. A T&P valve is a protective device, and no water heater went in with one the shop could not verify. Two of the jobs, both no-hot-water calls, could not wait; they were fitted with listed valves the owner picked up from a second supply house that stocked the shop's usual brand, at a higher price than usual, about a third more per valve. The remaining jobs were rescheduled to the regular supplier's promised date. The supplier was sent the lab's confirmation that the report had been altered, with a request to return the valves and to explain where the paper came from. The return process is covered in How to Return a Suspect Part to the Supplier With Evidence.

What would have changed the answer. Had the directory returned a listing for model -100A, and the valve bodies carried the certifier's mark, the valves could have been installed whatever the state of the supplier's PDF. The listing is the evidence; the paper was only ever a pointer to it. The reverse also holds: a perfectly genuine CoC from a supplier with an excellent record would not have made an unlisted relief valve acceptable.

When to stop and get help. If the altered document raises a question of fraud or of who is liable for valves already installed from earlier shipments, that is for your own attorney, not for a phone call with the supplier. Walk in with the documents, the lab's confirmation and the record from this step. This is not legal advice.

References

  • ISO/IEC 17025 (testing and calibration laboratories) and ISO/IEC 17065 (product certification bodies), as the accreditation basis for an issuer you can verify
  • ANSI Z21.22 / CSA 4.4 and the ASME Boiler and Pressure Vessel Code for water heater relief valves, binding through the International Plumbing Code Section 504 as adopted by your jurisdiction
  • OSHA Nationally Recognized Testing Laboratory program
  • See related: How to Handle a Supplier Substitution on a Backorder; The Suspect Counterfeit Quarantine SOP; How to Return a Suspect Part to the Supplier With Evidence
  • See related: Provenance Is Part of the Rating; How to Check a Listing Before You Buy an Unfamiliar Product