A certificate of analysis (CoA) is a batch-specific document from a manufacturer or testing lab. It lists what was tested and the results against defined specifications, typically identity, purity or potency, and contaminants such as endotoxin or heavy metals. In legitimate pharmaceutical supply chains, a compounding pharmacy receives a CoA with each lot of active pharmaceutical ingredient it buys and keeps it on file.
A CoA is only as trustworthy as the lab that produced it and the chain of custody behind it. Grey-market "research peptide" sellers routinely post CoAs, but independent test purchases have found vial contents that don't match the paperwork. Treat a CoA on a website as marketing until an accredited third party has verified it. See research peptides and GLP-1 medications.
Federal compounding law requires the bulk drug substances a 503A pharmacy uses to come with a valid certificate of analysis (21 U.S.C. 353a (external link)).