How do I verify a Chinese PCB factory's ISO 9001 certificate?

Get the certificate number, then look it up in a public registry rather than reading the PDF. For certificates issued in China by CNCA-accredited bodies, the query is the national certification and accreditation public service platform (cx.cnca.cn), searched by company name or certificate number; what comes back is the standard edition, the status (valid, suspended, withdrawn, expired), the certification scope in the body's own words, the issuing body and the expiry date. For UL, the check is a file number (the E-number) in UL Product iQ. For anything else, the issuing body named on the certificate almost always runs its own online validation. Measured on 2026-11-01, none of the sixteen plants profiled here publishes the number, which is why this step begins with an email rather than a search.

Do Chinese PCB factories actually hold the certifications they claim?

Most probably do. Measured over the sixteen profiles in this directory on 2026-11-01: fourteen claim ISO 9001, fourteen claim IATF 16949, twelve claim UL, eight claim ISO 14001, three claim ISO 13485, three claim GJB 9001C, two claim ISO 45001 and one claims QC 080000. Those claims are consistent with what listed PCB groups publish in annual reports, and a false claim about a certificate is a specific, checkable lie that few manufacturers bother to tell. The point is not that the claims are false. It is that a claim and a number cost the supplier the same to state, and only one of them can be checked by you.

What does an outdated standard edition on a factory website mean?

It means the page has not been owned for years, which is a dating signal rather than a fraud signal. Two of the sixteen measured plants carry a dead edition in public: one lists ISO 9001:2008 and ISO/TS 16949:2009 in recruitment advertising, editions whose certificates stopped being valid in September 2018 and which its profile traces to shareholder companies rather than to itself; the other lists ISO/IEC 27001:2013 on its own certification page, an edition whose certificates became invalid worldwide on 2025-11-01. The correct question is not why the page is wrong, but what edition and number the current certificate carries.

What should I ask a Chinese PCB factory about its certificates?

Five things, all answerable in one email: the certificate number and the standard edition as printed on the certificate; the certification scope wording, copied exactly, because 'production of printed circuit boards' and 'sales of electronic products' are different certificates; which sites are named, since a group certificate with a multi-site annex covers the listed plants and not the rest; the issuing body, and whether it is accredited for that standard in China; and the expiry date plus the date of the last surveillance audit. Then check the number yourself and compare what the registry says with what the quotation assumes.

EMS Suppliers, Verified

Home · PCB · Capabilities · Buyer questions · Guides

Fourteen of sixteen claim ISO 9001. None publishes the number that would prove it.

Certification is the one claim in a supplier deck that costs nothing to make and can be checked by anyone in about ninety seconds — if the supplier gives you the number. Measured across this directory, none does.

The measurement. On 2026-11-01 we swept the sixteen measured plant profiles for certification claims and for the published evidence behind them. Claims: 14 of 16 ISO 9001, 14 IATF 16949, 12 UL, 8 ISO 14001, 3 ISO 13485, 3 GJB 9001C, 2 ISO 45001, 1 QC 080000. Published certificate numbers: 0 of 16 — no number, no issuing body, no scope, no expiry, on any profile. And 2 of 16 carry a dead standard edition on a public page, one of them on the company’s own certification page.

What this page is. What a claim proves and a number proves, three free places to look a number up and the fields worth reading when you get there, the scope trap that makes a real certificate irrelevant to your board, and the four standard editions that have already expired — one of them exactly one year before this page was compiled.

What it is not. It is not an accusation. A claim can be entirely true and current; the sixteen plants are simply not publishing the version of it you can check. Nothing here is legal or procurement advice, and no registry was queried for these plants, because a registry query needs a number and none was published to query.

The claim census, by standard

Standard	Claimed	What the claim usually looks like in the record
ISO 9001	14 / 16	Sometimes with the edition (:2015), often as the bare words “ISO 9001”. One plant’s only source is a recruitment advertisement.
IATF 16949	14 / 16	The automotive standard, claimed by plants whose published customer base includes no named automotive customer. Two plants claim it without claiming ISO 9001 at all.
UL	12 / 16	Usually a mark in an image strip. One profile records the strip and notes there is no file number in it — a UL mark without an E-number is decoration.
ISO 14001	8 / 16	Environmental management. Relevant to a customer audit, rarely to your board.
ISO 13485	3 / 16	Medical devices. The one certificate where the scope wording decides whether your product is inside it.
GJB 9001C	3 / 16	The Chinese military quality standard. Not transferable to a commercial buyer, but a signal about the plant’s qualification work.
ISO 45001	2 / 16	Occupational health and safety, usually quoted alongside 14001 as a pair.
QC 080000	1 / 16	Hazardous-substance management (HSPM), the RoHS-family systems standard. The most useful certificate for an EU-bound buyer, and the rarest claim here.

Read the column, not the rows: fourteen claims of ISO 9001 across sixteen plants is what a mature industry looks like. The interesting number is the one underneath — zero published certificate numbers — because it is the same for the plants that certainly hold certificates and the plants that might not.

What a number proves that a claim does not

A certificate PDF is a picture of a document. A number is an entry in someone else’s database, and that difference decides what you can conclude:

The four fields that only the registry can give you

Status. Valid, suspended, withdrawn or expired. A suspension for a failed surveillance audit is invisible on the certificate the factory keeps sending you, and it is the single most useful thing a lookup returns.
Edition. The standard year, as recorded by the issuer rather than retyped by a marketing team — which is how you catch a page still advertising a 2008 or 2013 edition.
Scope, in the certification body’s own wording. This is where the trap lives; see below.
The site. A multi-site certificate carries an annex listing the addresses it covers. A group certificate naming four plants does not cover the fifth.

A PDF can be edited in an afternoon. A registry record cannot be edited by the certified company at all — only by the body that issued it, and every change is a dated event.

Three places to look a number up

Where	What you enter	What you get back
cx.cnca.cn National certification & accreditation public service platform (China)	Company name or certificate number	The record for certificates issued in China by CNCA-accredited bodies: edition, status, scope, issuing body, expiry. Covers the ISO and IATF files a Chinese PCB plant is most likely to hold. Reachability: on 2026-11-01 this platform returned HTTP 521 from our network, so treat the first check as whether you can reach it at all.
UL Product iQ	File number (E-number), or company name	Whether the file exists, what it covers, and which factory address is attached. A UL mark in an image strip with no E-number is not evidence of a UL file.
The issuing body’s own lookup	Certificate number	The name of the certification body is printed on the certificate; the large ones run online validation. This is also how you find out whether the body is accredited for that standard at all — an ISO/IATF certificate from an unaccredited body is a real document with no standing.

Two practical notes. IATF 16949 is issued only by certification bodies under IATF contract, so a plausible-looking IATF certificate from a body you cannot find in the IATF’s list is a finding in itself. And a Chinese-language certificate and an English-language certificate for the same file should carry the same number — when they do not, ask which one the registry holds.

The scope trap: a real certificate for something else

The most common false comfort in supplier documents is not a forged certificate. It is a genuine certificate whose scope does not cover what you are buying. Four matches have to line up, and buyers routinely check none of them:

Match	The question
Entity	Is the certified name the same legal entity, with the same USCC, that will sign your contract? Groups certify subsidiaries one at a time.
Scope	Does the scope wording say production of printed circuit boards — or sales of electronic products, or processing of components? A trading company can hold a perfectly valid ISO 9001 for sales, and it will not cover a fabrication process it does not run.
Site	Is the plant that will run your panel named on the certificate, or in its multi-site annex?
Standard	Is the standard the one your programme requires — ISO 9001 for general work, IATF 16949 for automotive, ISO 13485 for medical — and is it the current edition?

This is where the directory’s own profiles stop short and say so: they record what a plant claims about certification, not what a registry says about it. The gap between those two sentences is exactly one lookup wide. Whether the certified name is a factory or a trading company — the first of the four matches — is measured on trading company or factory.

The four editions that have already expired

A standard edition is not a style choice. Each transition has an end date, after which certificates to the old edition stop being valid — regardless of what the certificate’s own expiry date says. These are the four that appear on Chinese supplier pages, with the dates:

Edition	Certificates invalid after	Where it turns up
ISO 9001:2008	15 September 2018	Marketing pages and recruitment ads that were never revisited. A plant quoting it is quoting a document that has been dead for eight years.
ISO 14001:2004	15 September 2018	Usually alongside the 2008 quality edition, in the same stale block.
ISO/TS 16949:2009	14 September 2018	The predecessor of IATF 16949:2016. IATF stopped auditing to it after 1 October 2017; certificates lapsed the following September.
ISO/IEC 27001:2013	1 November 2025	The newest corpse, and the easiest to miss: the 2022 edition replaced it, the transition window closed on 31 October 2025, and every certificate to the 2013 edition became invalid on 1 November 2025 — exactly one year before this page was compiled.

Two of the sixteen, measured

Jingming — recruitment advertising lists ISO 9001:2008, ISO/TS 16949:2009 and GJB 9001A. All three are superseded editions (GJB 9001A is the 2001 edition, two revisions behind GJB 9001C-2017), and its profile is explicit that these trace to the shareholder companies’ operations rather than to Jingming’s own registration. A buyer reading the ad would attribute certifications the entity does not hold.
Champion Asia — its annual report lists current editions (ISO 9001:2015, ISO 14001:2015, ISO 45001:2018, QC 080000:2017, IATF 16949:2016), while its website’s certification page lists twelve entries including ISO 27001:2013, which has been invalid worldwide since 2025-11-01. The same group, two documents, two different decades.

Neither case is evidence of a false certification. Both are evidence of an unowned page — and an unowned page is the reason the number, not the page, is what you check.

The one-line version. A dead edition on a website tells you when the page was last touched. A certificate number tells you whether the certification is alive today. Only one of those answers the question you actually have.

Five questions, one email

Send with the RFQ · request answers in writing · then check the number yourself

 CERTIFICATION — five questions

 1. Number and edition
    The certificate number and the standard edition exactly as
    printed on each certificate you hold: ISO 9001, IATF 16949,
    ISO 14001, ISO 13485, UL file, and any others.

 2. Scope
    Copy the certification scope wording verbatim for each. Do not
    paraphrase it — the difference between "production of printed
    circuit boards" and "sales of electronic products" is the
    whole answer.

 3. Site
    Which manufacturing addresses are named on the certificate, or
    in its multi-site annex? If our boards will be built at a plant
    that is not named, say so.

 4. Issuing body
    Who issued it, and is that body accredited for this standard?
    For IATF 16949, the body must be under IATF contract.

 5. Validity
    Expiry date, and the date of the last surveillance audit.
    If any certificate is currently suspended, say so.

Question 2 is the one that changes decisions. A buyer who receives a scope statement reading “sales of electronic products” has learned that the plant is certified to sell, not to make — and that the fabrication was either subcontracted or never covered. Question 5 is the one that gets skipped, and a suspension is precisely the state a factory will not volunteer.

What this page cannot tell you

It cannot tell you whether any of the sixteen plants holds a valid certificate, because none of them published a number for us to check — an absence of evidence, recorded as an absence. It does not query the registries on your behalf, and the platform reachability note above is a dated observation from one network, not a verdict on the platform. Claims can be true, and a missing claim is not a missing certificate: several plants here are certified for things they never bothered to advertise. And nothing here is legal, customs or procurement advice — the certificate is one input to a supplier decision, alongside the entity checks in the still-running screen and the process evidence in the audit checklist.

Where this sits in the buyer’s sequence: is it certified? (the index entry this page expands) · verify a Chinese PCB supplier in 20 minutes (step 3 is this check, in context) · the factory audit checklist (which documents to request before the flight) · is the factory still running? (the entity screen, which a valid certificate does not replace) · the laminate layer (the other claim that costs nothing to make) · China-plus-one: five plants, zero ship dates · About & methodology.