The most common trap is reading a certificate as if it were a guarantee when it is actually a single point estimate from a single test.
The laboratory name and accreditation status can be checked in real time against the testing service's own register, and that two-minute check catches substituted certificates.
The standards that exist in this space — ICH Q3A, Q3B and various pharmacopoeial chapters — are worth reading once even if nothing you test is obliged to meet them.
One qualification: a single result from a single vial at a single time is a point estimate with no error bar, and no amount of decimal places changes that.
In practice: ask for the chromatogram, check the method section, check the lot number against the vial, and set your accept threshold before you see the result rather than after.
edited 31 Dec 2025 by e_dziedzic — added a caveat about sampling