# Validating a Hardware Certificate 2026: The Seven Parts, DoP and CE Marking, and the Six Red Flags

> A genuine test certificate carries 7 parts: the issuing laboratory with its address, its accreditation reference, the standard with its year, a report or certificate number, the date of issue and validity, the scope of application, and the tested configuration. The scope is the part most often missing, and checking all 7 takes about 5 minutes. This page also explains accreditation versus certification and CE marking with a Declaration of Performance, lists 6 red flags, and states what we hold: our 307 and 311 exit devices do not hold certificates today, and until certificate numbers exist we claim no rating for them.

Source: https://cantonlock.com/guides/certification-and-test-validation-2026/ · HYDE (Canton Hyland Hardware & Building Material Co., Ltd.), door hardware manufacturer, Zhongshan, China · Published 2026-09-21 · Updated 2026-11-05

Almost nobody checks a certificate. It arrives as a PDF with a logo, it satisfies the line on the submittal, and it is filed.

That is why the bad ones work. Not because they are sophisticated forgeries (almost none are) but because they are never opened by somebody looking for the seven things below.

HYDE (Canton Hyland, Zhongshan, since 1998) makes the 307 and 311 covered in this article.

## The seven parts of a genuine test certificate

| Part | What it tells you | Missing means |
| --- | --- | --- |
| Issuing laboratory or body, with address | Who performed or certified the test | The document has no author |
| Accreditation reference | That a competent authority audits that lab | A lab vouching only for itself |
| The standard, with its full designation and year | What was actually tested against | An unverifiable claim |
| Report or certificate number | The record you can check against the register | Nothing can be looked up |
| Date of issue and validity or review date | Whether it is current | It may have lapsed |
| Scope of application | Which sizes and configurations it covers | It may not cover your product |
| The tested configuration, described | Exactly what was in the test rig | The result attaches to nothing identifiable |

Six of those seven are usually present on any real document. The one most often missing, and most often the one that matters, is the scope of application, the range of sizes, materials, frame types and hardware sets the result extends to.

A certificate without a scope is a result for one object. With a scope, it is a result for a family, and your product is either inside that family or it is not.

## Accreditation is not certification, and the difference is who watches

These two words are used interchangeably in sales conversations and they mean different things.

Certification is a body stating that a product meets a standard. Accreditation is a higher-level authority stating that the certifying body is competent to make that statement, through an audit of its methods, equipment and staff.

A certificate from an unaccredited body is a statement by an organization that nobody has checked. It may be perfectly sound. It is not evidence in the sense a specification means, and a reviewer who knows the difference will treat it as a letter.

So the useful question is not "is it certified" but "who accredits the body that certified it, and what is the accreditation number". A genuine certificate carries that on its face.

## CE marking and the Declaration of Performance

For construction products in the European system (and door hardware covered by harmonized standards such as EN 1125, EN 179, EN 1154, EN 1935 and EN 12209 is in that system) the manufacturer issues a Declaration of Performance and applies the CE marking.

That structure is worth understanding because it changes what you should ask for.

The DoP is the manufacturer's declared performance against the harmonized standard, backed by testing carried out or assessed by a notified body, an organization designated by a member state for that purpose, with a four-digit identification number.

So on a CE-marked product there are three things to look for, and they connect: the CE mark itself, the notified body's number, and the DoP that states the declared classification. A CE mark with no DoP behind it is a sticker.

The UK operates a parallel arrangement with UKCA marking and approved bodies. Other markets have their own systems, and a certificate from one is not automatically evidence in another, the same point our fire door page makes about EN 1634-1 and UL 10C.

## How to check a certificate independently, in five minutes

Find the issuing body's own register: most certification bodies publish a searchable list of current certificates. That is the authoritative source; the PDF you were sent is a copy.

Search by the certificate number, not by the company name: a company name will find the company. A number finds the specific document, and its absence from the register is the answer you were looking for.

Check the scope against your product: your model, your size, your configuration. This is where most honest mismatches are found, not fraud, but a real certificate that covers the 900mm leaf and not the 1100mm one.

Check the date: certificates lapse, and are reissued with different numbers. An out-of-date certificate is not evidence of current compliance even if the product has not changed.

Ask for the test report, not only the certificate: the certificate is a summary; the report is the evidence. A supplier who can produce the report has one, and a supplier who cannot may be holding a certificate issued to somebody else.

## The six red flags

A logo with no number: a certification body's mark on a datasheet with no certificate number behind it is decoration. This is the commonest one by a wide margin.

A certificate in a name that is not the supplier's: certificates attach to the manufacturer of the tested product. A trading company forwarding a factory's certificate should say so and name the factory; one that presents it as its own is telling you something about how it operates.

"Tested to" rather than "certified to". Tested to a standard can mean an internal test following the method. It is not the same claim, and the wording is usually chosen deliberately.

A scope that does not mention your size or configuration: covered above, and the most common legitimate failure.

A certificate for a "series" or "range": sometimes genuine and defined in the scope; often a way of extending one tested model across a catalog. Check whether the scope lists the models or describes a family by dimension.

A refusal to provide the report: the certificate exists or it does not, and the report either exists or the certificate is worth asking harder questions about.

## Initial type testing, FPC and why a certificate can go stale without anything changing

A certificate is a photograph of a product at one moment. Two mechanisms are supposed to keep it true afterwards, and knowing their names makes a supplier's answer much easier to assess.

Initial type testing is the test itself, the sample went to a laboratory, was tested against the standard, and a result was recorded. That is the event the certificate describes.

Factory production control is the ongoing part: the manufacturer's documented system for ensuring that what leaves the line today still matches what was tested. Under the European construction products system, FPC is audited, and a certificate for those product families references it.

That distinction explains something buyers find puzzling. A product can be genuinely tested and still drift (a supplier changes a sub-component, a plating line, a casting source) and the certificate does not automatically become false, but it stops describing the product accurately.

So on a long supply relationship the useful question is not only "do you have a certificate" but "has anything in the tested configuration changed since it was issued". An honest supplier has a record of what changed and when, because that record is what FPC is.

## What to ask when a project needs evidence you have not been given

The situation is common: a specification names a classification, the supplier has not offered a certificate, and nobody wants to be the one to ask badly. Four sentences cover it.

"Which standard and classification does this model hold, and what is the certificate number?", a single question that a supplier either answers with a number or does not.

"Which body issued it, and who accredits them?", the accreditation question from earlier on this page.

"Does the scope cover this size and configuration?", quote your leaf size, your frame type, your hardware set.

"Can we have the test report as well as the certificate?", the request that separates a holder from a forwarder.

If the answer to the first is that the product is not certified, that is a usable answer and often the correct one for the application. The failure mode is not an uncertified product; it is an uncertified product described as though it were certified, which is what the six red flags above are all detecting.

## How to verify a door-hardware certificate

The five-minute check above works for any certificate. Door hardware brings four kinds of paper in particular, and each one has its own public place to look it up.

| Document | Issued by | Where to check it | What must match |
| --- | --- | --- | --- |
| CE marking with a notified body number | The manufacturer; the number identifies the notified body | NANDO, the European Commission's database of notified bodies | The body is notified under the Construction Products Regulation |
| Declaration of Performance (DoP) | The manufacturer | The manufacturer, who must supply it | Product type, harmonized standard, declared classification, notified body number |
| ISO 9001 certificate | An accredited certification body | IAF CertSearch, or the certification body's own register | Legal name, address, scope and expiry |
| UL listing | UL | UL Product iQ, searched by file number | Company, product category and model |

CE marking: the four-digit number next to the CE mark, or on the certificate, identifies the notified body. Search that number in NANDO and read the entry: the body's name, and the legislation it is notified under. For door hardware that legislation is the Construction Products Regulation. A number that does not appear in NANDO, or a body notified only for unrelated legislation, cannot stand behind a CE mark on panic or emergency exit hardware.

A test report, a certificate and a DoP are three different documents. The test report records what a laboratory measured on a sample. The certificate of constancy of performance is the notified body's statement that it assessed the product type and keeps the factory production control under surveillance. The DoP is the manufacturer's own declaration under the Construction Products Regulation: it states the declared performance and names the notified body. Panic exit devices to EN 1125, emergency exit devices to EN 179 and fire-resisting doorsets to EN 16034, whose fire resistance is tested to EN 1634-1, are covered by harmonized standards, so they are placed on the European market with a DoP. A test report offered where a DoP is required is evidence that a test happened, not a declaration anyone is accountable for.

ISO 9001: it certifies a management system, not a product, so it says nothing about whether a lock meets EN 12209 or a closer meets EN 1154. It is still worth checking, in three steps. First the issuer: the certificate should carry the accreditation mark of a national accreditation body that has signed the IAF multilateral recognition arrangement, such as UKAS in the UK, DAkkS in Germany, ANAB in the United States or CNAS in China. Then the certificate: search its number in IAF CertSearch or in the certification body's own register. For a certificate issued in China, the CNCA, the national certification regulator, also runs a public lookup. Then the content: the legal name and address, the scope of activities and the expiry date must match the supplier and the product you are buying.

An ISO 9001 certificate runs on a three-year cycle with surveillance audits in between, and it can be suspended or withdrawn between audits. The PDF does not change when that happens; the register does.

UL: a listing is checked in UL Product iQ by file number, the reference a listed manufacturer can quote at once. The entry shows the company, the product category and the listed products. "UL tested", "tested to UL 10C" or "meets UL standards" without a file number is not a listing. A listing also carries follow-up: UL inspects production periodically to confirm that it still matches what was listed, which is the difference between being listed and having once been tested. A UL Recognized Component mark is narrower again: it covers a part meant to go inside a listed product, not a finished item to install on its own.

Tested, certified and listed are three different claims. Tested means a laboratory tested a sample and wrote a report. Certified means a body assessed the product against a standard and keeps that claim under surveillance. Listed means the product appears in the certifier's public directory, subject to follow-up inspection. In every case the evidence covers the model and configuration that were assessed. A report on one lever set does not extend to a different lever, case or finish because they share a catalog page.

At the lookup stage, four results mean stop:

The name does not match: the certificate is in a name other than the supplier's legal name, and nobody explains the relationship.

The dates have passed: the expiry is behind you, or the register shows a status the PDF does not.

The scope covers something else: an ISO 9001 scope for trading rather than manufacturing, a standard other than the one your specification names, or a product family that does not include your model.

Nothing can be looked up: no number to search, no register that holds it, or a register entry the supplier cannot point you to. A certificate that cannot be checked cannot be relied on.

The same check applies to us. Our stamping plant is certified to ISO 9001:2015, certificate 69125Q0026****, valid to 29 October 2028. Ask us for the full certificate and check it the way this section describes: issuer, accreditation, legal name, scope and expiry.

## What we hold, stated plainly

Where one of our products has been tested and a certificate exists, the product page names the standard, the classification and the scope, and the certificate is available on request. Our documents page lists test documents as on-request rather than published, and that is literal: we send what exists for the exact models you ask about.

Our 307 and 311 exit devices do not hold certificates today: until certificate numbers exist, nothing we publish will imply they hold a fire rating, an ANSI grade or a UL listing, not in a description, not in a comparison, and not by placing a standard's number near a product that has not been tested to it.

We also do not reproduce another manufacturer's certificate to describe our own product. A certificate belongs to the assembly it was issued for, and borrowing one is the same category of error as inventing a dimension, which is the argument our dimensional pages make, applied to paper.

## Why a supplier should welcome the check

The five-minute check above is sometimes read as distrust. It is the opposite: it is the only thing that makes a genuine certificate worth more than a confident sentence.

A factory that holds real evidence loses nothing when a buyer verifies it, and gains the one thing that cannot be claimed, a buyer who has checked. A factory that does not hold it is the reason the check has to exist.

So ask, and expect the register entry. It costs the supplier nothing and it is the cheapest due diligence in the whole procurement.

## FAQ

### What must a genuine test certificate contain?

Seven things: the issuing laboratory or body with address, an accreditation reference, the standard with its full designation and year, a report or certificate number, the date and validity, the scope of application, and a description of the tested configuration. The one most often missing (and most often the one that matters) is the scope.

### What is the difference between accreditation and certification?

Certification is a body stating a product meets a standard. Accreditation is a higher authority stating that the certifying body is competent to make that statement, through an audit of its methods, equipment and staff. A certificate from an unaccredited body is a statement nobody has checked.

### What is a Declaration of Performance?

For construction products in the European system (including door hardware under harmonized standards like EN 1125, EN 179, EN 1154, EN 1935 and EN 12209) the manufacturer issues a DoP declaring performance against that standard, backed by a notified body with a four-digit number, and applies the CE marking. A CE mark with no DoP behind it is a sticker.

### How do I check a certificate is real?

Find the issuing body's own register and search by certificate number rather than company name. Check the scope covers your model, size and configuration. Check the date. And ask for the test report, not only the certificate, the certificate is a summary, the report is the evidence.

### What are the red flags on a hardware certificate?

A logo with no certificate number (by far the commonest). A certificate in a name that is not the supplier's, presented as their own. "Tested to" rather than "certified to". A scope that does not mention your size or configuration. A certificate for a vague "series". And a refusal to provide the underlying report.

### How do I look up a CE, ISO 9001 or UL certificate?

CE: search the four-digit notified body number in NANDO, the European Commission's database, and ask the manufacturer for the Declaration of Performance. ISO 9001: check that the certification body is accredited, then search the certificate number in IAF CertSearch or the issuer's register and match the legal name, scope and expiry. UL: search the file number in UL Product iQ. "UL tested" without a file number is not a listing.

### What is the difference between tested, certified and listed?

Tested means a laboratory tested a sample and wrote a report. Certified means a body assessed the product against a standard and keeps the claim under surveillance. Listed means the product appears in the certifier's public directory, with follow-up inspection of production. Each covers only the model and configuration that were assessed.

### Do your exit devices hold fire certification?

Our 307 and 311 exit devices do not hold certificates today. Until certificate numbers exist, nothing we publish will imply they hold a fire rating, an ANSI grade or a UL listing. Where a product has been tested, the page names the standard, classification and scope, and the certificate is available on request.

Related HYDE models: 307, 311