Batch-specific identity and purity data — how to read a COA line by line, and the six red flags that mean the certificate you're looking at proves nothing.