Flip over a pack of Dr. Greenthumb's gummies and you'll usually find a QR code or a batch number printed near the ingredients. Scan it or punch it into the brand's site and you land on a document that tells you more than any front-label graphic ever could: the Certificate of Analysis. People call it a COA for short, and once you learn to read one, you'll never buy edibles the same way again.
Here's the short version before we get into the weeds. A gummy COA is a lab report that shows exactly what a batch of edibles contains — how many milligrams of THC and CBD per piece, whether the batch passed screens for pesticides, heavy metals, solvents, and microbes, and who tested it. When you see "third party tested edibles" on a package, that COA is the proof. A third-party lab is one the brand doesn't own, so the numbers aren't graded on a curve by the same people selling the candy.
Let's walk through what each section actually means, using the kind of layout you'd see on a real gummy report.
The header: who, what, and when
The top of any legit COA names the testing lab, lists its license or accreditation number, and gives you a few pieces of ID for the batch. You're looking for:
- Sample name and product type — should match the gummy you bought (for example, a mixed-fruit 10-piece pack).
- Batch or lot number — this needs to match the number printed on your package. If it doesn't, the COA belongs to a different production run and tells you nothing about your candy.
- Test date and received date — cannabinoids and freshness shift over time, so a report from three years ago on a fresh-looking pack is a small red flag.
- Lab name and accreditation — reputable labs carry ISO/IEC 17025 accreditation, which is the international standard for testing competence.
That batch-number match is the single most useful habit you can build. A brand can post one clean COA and slap it on everything, but the batch number is what ties the paper to the pack in your hand.
Cannabinoid potency: the milligram math
This is the section most people came for. The potency panel lists cannabinoids — THC, CBD, and often minor ones like CBG, CBN, THCV, and their acidic forms (THCA, CBDA) — with a concentration for each.
Edibles usually report potency two ways: per serving (one gummy) and per package (the whole bag). So a pack might read 10 mg THC per piece and 100 mg THC per 10-piece pack. Do the quick multiplication yourself. If the per-piece number times the piece count doesn't roughly equal the total, something got mislabeled, and you want to know before you eat it.
A few terms worth knowing:
- Total THC is calculated, not just measured. Labs use a formula (roughly Total THC = THCA × 0.877 + delta-9 THC) because raw THCA converts to active THC when heated. On a gummy that's already been made with activated distillate, most of the THC shows up as delta-9 already.
- LOQ / LOD stand for Limit of Quantitation and Limit of Detection. When a cannabinoid reads "<LOQ" or "ND" (not detected), it means the lab couldn't measure a meaningful amount. Seeing ND next to CBD on a THC-only gummy is normal, not a mistake.
- Homogeneity matters more in edibles than almost anything else. During manufacturing, the cannabis oil has to be emulsified evenly through the gummy slurry before it's poured into molds. If mixing is sloppy, one gummy in the batch runs hot and another runs weak. Some COAs include a homogeneity or uniformity test showing the milligrams stay consistent piece to piece. That's a sign of a careful kitchen.
Many states allow a potency variance of roughly plus or minus 10 to 15 percent between the label claim and the lab result. So a gummy labeled 10 mg that tests at 9.2 mg isn't a scam — it's inside normal tolerance.
The contaminant panels: the part that keeps you safe
Here's where a COA earns its keep. Cannabis is a bioaccumulator, meaning the plant pulls whatever's in its soil and water up into its tissue. Edibles concentrate extract, so testing the finished product matters. A full gummy COA typically screens for:
- Pesticides — a long list of chemical residues, each with a state action limit. You want every line marked "Pass" or below the limit.
- Heavy metals — usually lead, arsenic, cadmium, and mercury. These come from soil, fertilizer, or growing equipment.
- Residual solvents — leftovers from extraction, like butane, ethanol, or propane. A clean-running extraction lab keeps these near zero.
- Microbials — screens for things like E. coli, Salmonella, and certain molds and yeasts.
- Mycotoxins — toxic byproducts some molds produce, tested separately from the mold count.
Each panel shows a result and a limit, plus an overall Pass/Fail. If a batch failed anything, it shouldn't be on a shelf, so a posted COA should read Pass across the board. Missing panels are worth noticing too — a report that shows potency but skips pesticides and metals is only telling you half the story.
Ingredients and the label crosswalk
The COA covers what's in the cannabis extract, but the package ingredient list covers everything else. Read them together. A fruit gummy's ingredient list usually runs something like pectin or gelatin as the gelling agent, cane sugar and corn syrup or tapioca syrup for sweetness and texture, citric or malic acid for tartness, natural and artificial flavors, coloring, and the cannabis distillate or emulsion.
Pectin-based gummies are plant-derived and vegan-friendly; gelatin gummies are not. If that matters to you, the ingredient panel — not the COA — is where you confirm it. The COA confirms the cannabinoid dose and the safety screens; the ingredient list confirms the recipe.
Storage: keeping the batch honest
A COA is a snapshot of a batch at test time, and how you store gummies afterward decides how close they stay to that snapshot. Heat and light are the enemies. Keep edibles in their original resealable pack or an airtight container, somewhere cool and dark — a pantry shelf beats a car dashboard or a sunny windowsill every time. Sugar-coated gummies can weep or clump in humidity, and warmth can make pieces fuse together, which throws off the neat per-piece dosing the COA promised. Cannabinoids also slowly degrade over time; that's part of why the test date and any best-by date on the package are worth a glance.
Why this is part of the culture, not just the fine print
Dr. Greenthumb's grew out of a hip-hop heritage that's always valued knowing what's real and calling out what isn't. B-Real and the Cypress Hill crew helped push cannabis into the open long before COAs existed, back when you took what you got and hoped for the best. Third-party lab testing is the grown-up version of that same instinct — proof over hype. When we point you to a COA, we're handing you the receipt so you can check our work.
So next time you grab a pack, do the three-step move: match the batch number, check the per-piece milligrams against the pack total, and scan the contaminant panels for a clean sweep of passes. That's how you buy edibles like someone who knows the game.
This content is for educational purposes only.
