A management-system certificate is a snapshot. It is issued on a date, for a defined scope, and it stays valid only while surveillance audits continue and no suspension or withdrawal has been decided. Before you rely on a supplier’s certificate, run four checks.
1. Confirm the status with the issuing body
Every certification body must be able to confirm, on request, whether a certificate it issued is valid (ISO/IEC 17021-1:2015, clause 8.1). Use the body’s public register or ask it in writing. A PDF on its own proves only that a certificate once existed.
2. Read the scope, not only the standard
The scope states the activities and sites covered. A certificate for “design and manufacture of steel pipes” at one plant says nothing about a second plant or a trading activity. Check that what you are buying falls inside the scope.
3. Check the edition and the dates
The certificate names the edition audited — for example ISO 9001:2015 — and the expiry date. When a standard is revised, certificates move to the new edition within the transition period that applies to it.
4. Look at the status, not the design
Valid, suspended, withdrawn, expired, reduced in scope: only the issuing body can tell you which applies today. A suspended certificate may look identical to a valid one.
