A hemp COA expires because it only ever describes the batch and date it was run on — once that window lapses, it stops being proof the product still meets the limit or matches its label. When an inspector or buyer asks for a certificate and gets an expired one, the safe move is to pull the SKU until a current COA is on file.
A Certificate of Analysis never physically decays — the PDF is the same file next year that it is today. What expires is its authority as proof. A COA is a dated, batch-specific snapshot: it says "this sample, from this lot, on this date, tested like this." The further you get from that date, and the more product moves through that batch and the next, the less that snapshot tells anyone about the jar actually sitting on your shelf right now.
So "expiration" here is less like milk going sour and more like a boarding pass going stale — the document is real, but it no longer gets you where you need to go. Most labs and brands make this explicit by assigning a validity window, often measured from the test date, and printing an expiration or "valid through" line right on the certificate. Read that line. It is the difference between a document that settles a question and one that only looks like it does.
There are three honest reasons a certificate stops being reliable, and none of them is bureaucratic box-ticking:
Because of the first reason, expiration is really two clocks running at once: the date clock (how old is this test?) and the batch clock (is this even the lot the test was run on?). A certificate can be well within its validity window and still be the wrong COA because the product came from a newer batch. Both have to be right.
There is no single legal number that fits every product, and anyone quoting you an exact universal figure is guessing. What is true in practice: many labs and brands assign a validity period measured from the test date — commonly around twelve months — and they print it on the certificate. Perishable and less-stable forms, like fresh flower and some edibles, are frequently treated as shorter-lived than shelf-stable items. The reliable rule is simple: read the COA for its own stated expiration or validity period, and default to the test date plus your supplier's stated window rather than assuming.
Whatever the number, treat the printed test date as the anchor. If a supplier hands you a certificate with no date at all, that is not a long-lived COA — it is an unusable one, and it should be replaced before the batch ever reaches your shelf.
The moment a certificate lapses, you lose the one thing it existed to give you: the ability to prove, on demand, that the product is within the limit and matches its label. Texas DSHS administers hemp registration and licensing, and retailers and manufacturers are expected to be able to produce current COAs and records on request. When an inspector points at a jar and the only certificate you can produce is expired — or belongs to a batch that already sold through — you do not have a complete record for that SKU.
That is why an expired COA so often ends with a product coming off the shelf. Without a current, matched certificate, the defensible move is to stop selling the item until you can put a valid one on file. The exposure for an out-of-spec or unproven product on your shelf is yours, not just the manufacturer's — "the distributor said it was fine" is not a record. This is the same logic that runs through a full Texas hemp inspection checklist: every product on display needs a live COA behind it, not an archived one.
Texas evaluates hemp on a total-THC basis. THCA is the non-intoxicating acid form of THC, and when a product is heated — smoked, vaped, or baked — much of that THCA converts into active delta-9. A total-THC standard counts that convertible portion from the start, measuring the limit against delta-9 plus the THC that THCA will become. This standard is currently in effect in Texas in 2026. Federal law defines hemp as cannabis with no more than 0.3% delta-9 THC by dry weight, so a certificate that reports delta-9 only can look fine on paper and still fall short of what Texas actually measures.
For expiration, this matters twice. First, an older COA that never captured total THC was never fully sufficient for Texas, so replacing it is a correction, not just a renewal. Second, when you re-test a batch to refresh an expiring certificate, insist on a full potency panel with total THC — not a delta-9-only re-run. There is also a longer clock worth watching: a change to the federal definition of hemp is expected to take effect November 12, 2026, and industry groups estimate many current intoxicating-hemp products may not qualify unless Congress acts. Knowing which of your COAs are current, and what they actually report, is how you stay ahead of that shift.
The failure mode is almost always the same: nobody was watching the dates until an inspector asked. A workable tracking routine has four parts —
A spreadsheet can hold this together when you have a handful of SKUs. It quietly breaks the moment you have dozens of products across several suppliers, each on its own clock — which is exactly when a lapse slips through. Building this into your standing records is the durable fix; our guide to keeping audit-ready hemp records covers the wider system this expiration tracking lives inside.
HempOS is a Texas hemp compliance platform that reads the dates off your COAs so the tracking above happens on its own. It pulls the test date and validity window from each certificate, ties it to the product and batch it covers, and flags what is expiring soon or already expired — before any of it turns into an inspection finding. A certificate that only reported delta-9 with no total THC gets flagged the same way, so you know which batches need a full re-test.
From there, every product carries a batch-accurate record, a public COA verification page, a QR link you can print on labels or post at the counter, and an inspection-ready audit packet you can export in one click. When a supplier sends a fresh certificate, HempOS supersedes the old one so the public page and QR always point to the current record. It is built to help you get inspection-ready and keep your COAs from silently lapsing — not to promise outcomes.
Want to see where you stand? Run a free COA check to surface expired and expiring certificates across your own products, or find and claim your business to start organizing records. Retail teams can explore the retail compliance portal, and you can keep up with regulatory shifts on HempOS News. You can reach us any time at [email protected].
A COA does not stop being a real document, but it stops being trustworthy proof of the current batch after a point. Labs and brands typically assign a validity window — often around a year from the test date — and many buyers and inspectors treat an old certificate as unusable. A COA only ever describes the batch it was run on, so as that batch ages or is replaced, the certificate's usefulness expires with it.
There is no single universal number, and validity depends on the product and who assigned it. Many labs and brands set a validity window measured from the test date, commonly around twelve months, and print that date on the certificate. Perishable forms like flower and some edibles are often treated as shorter. Always read the certificate for its own stated expiration or validity period rather than assuming.
When a COA has expired, you can no longer prove the product still meets the limit or matches its label. Texas DSHS administers hemp registration and licensing, and retailers and manufacturers are expected to produce current COAs and records on request. An inspector who asks for a certificate and gets an expired one has an incomplete record, so the safe move is to pull the SKU until a current COA is on file.
In Texas the added factor is the total-THC standard. THCA's convertible THC counts toward the limit, so a certificate that only reported delta-9 was never fully sufficient and re-testing to a total-THC panel is often needed. Cannabinoid content can also shift as a product ages, so an old result may no longer reflect what is in the jar today.
Record the test date and stated validity period for every COA, tie each certificate to the specific product and batch it covers, and set an alert well before it lapses so you can request a replacement in time. A spreadsheet can work at small scale, but it breaks down as SKUs and suppliers grow. HempOS reads the dates off each COA and flags expiring and expired certificates automatically.
This is general information, not legal advice. Confirm your specific obligations with the Texas DSHS or qualified counsel.
Surface expired and expiring COAs, batch mismatches, and missing total THC before an inspector does. HempOS helps you get inspection-ready.
Questions? [email protected]