You've been handed an ACORD 25 Certificate of Insurance. Your contract requires the subcontractor to carry $1 million in general liability, name you as additional insured, and include a waiver of subrogation. The certificate shows those limits and says "additional insured and waiver of subrogation per contract" in the description box.
You approve it. Work starts. Six months later, a claim happens. The carrier denies coverage because the additional insured endorsement was never added to the policy. The certificate said it was covered, but the certificate doesn't change the policy. You're now in litigation over who pays.
This scenario is common enough that the ACORD 25 form includes a legal disclaimer in capital letters: "THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER."
The certificate is not the policy. It's a summary. Reading it correctly means knowing which fields prove coverage and which fields are just descriptions that may or may not match reality.
What the ACORD 25 Is
The ACORD 25 is a standardized one-page form published by ACORD (Association for Cooperative Operations Research and Development), a nonprofit that creates insurance industry forms. It's the most common format for Certificates of Insurance in the U.S.
The form has been revised several times. The current version is dated 2016/03. Older versions (2010/05, 2009/01, 2001/08) are still in circulation. The structure is largely the same across versions, but the disclaimer wording changed in 2010 to be more explicit about the certificate's limitations.
The form has eight main sections. Here's what each one tells you — and what it doesn't.
Section 1: Producer (Broker Information)
Location: Top left, first box.
What it shows: - Producer (broker/agent) name - Contact information (address, phone, fax, email)
What to check: Does the producer information match who you've been dealing with? If the certificate comes from a broker you've never heard of, verify it directly with the insured. Certificate fraud exists — fake COIs with real-looking ACORD forms but no actual policy behind them.
What it doesn't tell you: Whether the producer is authorized to issue the certificate. Brokers can issue certificates on behalf of carriers they represent, but the certificate itself doesn't prove authorization.
Section 2: Insured
Location: Top left, below producer information.
What it shows: - Legal name of the business or individual covered by the policy - Mailing address
What to check: The legal entity name must match exactly with what's in your contract. "ABC Construction" is not the same as "ABC Construction, LLC" or "ABC Construction Services, Inc."
If the name doesn't match, the certificate is wrong. The entity named in your contract is the one that needs to be insured. If John Smith's one-man operation signed the contract under "Smith Roofing LLC" but the certificate shows "John Smith DBA Smith Roofing," you have a coverage gap.
Common mistake: Using a DBA (doing business as) name when the policy is written under the individual's personal name, or vice versa. The certificate must show the named insured exactly as it appears on the policy.
Section 3: Insurers
Location: Right side, below "INSURERS AFFORDING COVERAGE" header.
What it shows: A list of insurance companies providing coverage, labeled A through E, with: - Insurer name - NAIC number (National Association of Insurance Commissioners identifier)
What to check: The insurers should be admitted carriers licensed in your state (for most standard policies) or reputable surplus lines carriers (for harder-to-place risks).
Look up the NAIC number at naic.org or search the carrier name to verify it's a real company. Fake certificates sometimes list invented insurer names.
What the NAIC number tells you: Every licensed insurer has a unique NAIC number. If the NAIC number on the certificate doesn't match the carrier name, the certificate is wrong.
What it doesn't tell you: Whether the carrier is financially stable. An "A.M. Best" rating (A or better is standard) tells you more about financial strength. The certificate doesn't include this. You have to look it up separately if it matters for your risk tolerance.
Section 4: Coverages
Location: The main grid, center of the form.
This is the most important section. It lists each policy the insured carries, with columns for: - Letter (A-E, matching the insurer from Section 3) - Policy number - Policy effective date - Policy expiration date - Limits
General Liability
Row label: "GENERAL LIABILITY" with checkboxes for Commercial General Liability, Claims-Made, Occur, and optional modifiers.
Checkboxes to note: - Claims-Made vs. Occur: Most GL policies are "Occur" (covers incidents that happened during the policy period, regardless of when the claim is filed). "Claims-Made" is less common for GL and requires careful tracking of retroactive dates and tail coverage. - Policy modifiers: GEN'L AGGREGATE LIMIT APPLIES PER (Policy, Project, Loc). This tells you whether the aggregate limit is shared across all of the insured's work or dedicated to this specific project or location.
Limits grid: - EACH OCCURRENCE: The maximum the policy pays for a single incident. $1,000,000 is standard. - DAMAGE TO RENTED PREMISES (Ea occurrence): Coverage for damage to property the insured is renting or using (e.g., an office buildout damages the landlord's space). Often $100,000-$300,000. - MED EXP (Any one person): Medical payments coverage. Typically $5,000-$10,000. Pays small injury claims without a liability determination. - PERSONAL & ADV INJURY: Coverage for non-bodily-injury claims like libel, slander, wrongful eviction. Usually $1,000,000. - GENERAL AGGREGATE: The total the policy will pay for all claims during the policy period (except products/completed ops). Standard is $2,000,000. - PRODUCTS - COMP/OP AGG: Aggregate for products and completed operations claims. Usually matches the general aggregate ($2M).
What to verify: The limits meet your contract minimums. If your contract requires $1M per occurrence / $2M aggregate and the certificate shows $500K / $1M, it doesn't comply.
What it doesn't prove: That the policy is actually in force. The certificate is a snapshot. If the insured stopped paying premiums after the certificate was issued, the policy could be cancelled mid-term. Verifying with the carrier directly (via a confirmation hotline) is the only way to confirm active status at a specific point in time.
Automobile Liability
Row label: "AUTOMOBILE LIABILITY" with checkboxes for vehicle types covered.
Checkboxes: - ANY AUTO: Broadest coverage — includes owned, non-owned, and hired autos. - OWNED AUTOS ONLY: Covers only vehicles the insured owns. - SCHEDULED AUTOS: Covers only specifically listed vehicles (by VIN). - HIRED AUTOS: Rental vehicles. - NON-OWNED AUTOS: Employee-owned vehicles used for business purposes.
If your contract requires auto coverage and the certificate only shows "Scheduled Autos," you need to verify that the scheduled vehicles are the ones that will be on your property or used for your work.
Limits: - COMBINED SINGLE LIMIT (Ea accident): The total available for bodily injury + property damage per accident. $1,000,000 is common. - BODILY INJURY (Per person / Per accident): If not using a combined single limit, BI is split. Old standard was $100K/$300K, but most commercial policies now use CSL. - PROPERTY DAMAGE (Per accident): Separate PD limit if not CSL.
What to check: If the insured will have vehicles at your job site or be transporting goods for you, confirm the auto liability limits meet your contract. Also confirm the coverage applies to the type of vehicle use (e.g., hauling, delivery).
Umbrella / Excess Liability
Row label: "UMBRELLA LIAB" and "EXCESS LIAB"
Difference: - Umbrella: Sits over underlying policies (GL, auto, employer's liability) and also provides some coverage for exposures not covered by the underlying policies. - Excess: Only increases limits of underlying policies — no coverage for gaps.
Checkboxes: Occur vs. Claims-Made, same logic as GL.
Limits: - EACH OCCURRENCE: The per-claim limit the umbrella/excess adds. Often $1M, $2M, or $5M. - AGGREGATE: Total available for all claims. Matches or exceeds the occurrence limit.
What to verify: If your contract requires umbrella coverage (common for large construction projects or high-risk work), the certificate must show it. The umbrella policy number should be listed, along with effective dates and limits.
Retention: Some umbrellas have a self-insured retention (SIR) — the insured pays the first $X of a claim before the umbrella kicks in. This isn't shown on the ACORD 25. If it matters, ask for the umbrella policy dec page.
Workers' Compensation and Employers' Liability
Row label: "WORKERS COMPENSATION AND EMPLOYERS' LIABILITY"
Checkbox: "ANY PROPRIETOR/PARTNER/EXECUTIVE OFFICER/MEMBER EXCLUDED?" — If checked "Y," owners are excluded from WC coverage. Common in small businesses where the owner elects to self-insure rather than pay into the state WC system.
Statute: Shows the state(s) where WC coverage applies. Should match where the insured's employees will be working.
Limits: - E.L. EACH ACCIDENT: Employers' Liability coverage (Part B of the WC policy) limit per accident. Standard is $100,000, but contracts often require $500K or $1M. - E.L. DISEASE - EA EMPLOYEE: Limit for occupational disease claims per employee. - E.L. DISEASE - POLICY LIMIT: Total disease coverage for all employees during the policy period.
What to check: If your contract requires workers' compensation, the certificate must show it and the statute must include your state. Texas is unique — WC is optional for private employers ("non-subscriber" status is legal). If the insured is a Texas non-subscriber, this box may be blank or show a note. Confirm your contract allows non-subscriber status or requires an alternative (occupational accident policy).
What it doesn't tell you: The insured's experience mod (a multiplier that adjusts WC premiums based on past claims). A high mod (1.2+) signals a poor safety record. The certificate doesn't show this — you'd need to ask for it directly.
Other Coverages
Blank rows: ACORD 25 includes space for additional policies — professional liability, pollution liability, cyber liability, inland marine, etc.
These aren't pre-labeled. The producer fills in the coverage type, policy number, dates, and limits manually.
What to check: If your contract requires coverage types beyond GL/Auto/WC, verify they're listed here with correct limits.
Section 5: Certificate Holder
Location: Bottom right, large box.
What it shows: The name and address of the party receiving the certificate — the one who requested proof of insurance.
What to check: This must match your legal entity name exactly. If you're "XYZ Development LLC" and the certificate says "XYZ Development," it's wrong.
Why does it matter? If a claim happens and the certificate holder name doesn't match the entity named in the contract, the insurer may argue there's no obligation to the actual contracting party.
Holder vs. Additional Insured: Being listed as certificate holder gives you no coverage. It only means you get a copy of the certificate. To actually be covered by the insured's policy, you need to be added as additional insured via endorsement (shown in the Description of Operations box or on an attached endorsement form).
Section 6: Description of Operations / Locations / Vehicles
Location: Lower left, large text box.
What it shows: A free-text description of: - The work being performed - Project location or address - Vehicle descriptions (if applicable) - Special endorsements — additional insured, waiver of subrogation, primary and noncontributory, 30-day notice of cancellation
What to check: This is where certificate mistakes are most common. The box may say "Additional Insured and Waiver of Subrogation per contract," but that doesn't mean the endorsements are actually on the policy.
The certificate is evidence, not proof. To verify endorsements exist: 1. Ask for a copy of the endorsement forms (CG 20 10, CG 20 33, CG 24 04, etc.) 2. Call the carrier's certificate verification line and ask if endorsements are active for the policy number shown 3. Request a full policy dec page, which lists all active endorsements
Red flags: - Vague wording: "AI included" (which endorsement form? blanket or scheduled?) - No reference to completed operations coverage (most contracts require it) - Missing waiver of subrogation when your contract requires it - "Certificate holder is additional insured" without specifying the endorsement or scope
Notice of cancellation: The Description box often states "30 days' notice of cancellation" or "10 days for nonpayment." This is aspirational. The certificate holder will only receive notice if the carrier's policy administration system is set up to send it automatically or the insured's broker manually notifies them.
In practice, many certificate holders never receive cancellation notices. Don't rely on this. Track expiration dates yourself and request renewal certificates 30-60 days in advance.
Section 7: Should Any of the Above Described Policies Be Cancelled...
Location: Bottom section, in all caps.
The formal notice clause. It reads:
"SHOULD ANY OF THE ABOVE DESCRIBED POLICIES BE CANCELLED BEFORE THE EXPIRATION DATE THEREOF, NOTICE WILL BE DELIVERED IN ACCORDANCE WITH THE POLICY PROVISIONS."
This means: maybe you'll get notice, maybe you won't. It depends on what the policy says and whether the carrier's system is configured to send it.
Many GCs and property managers mistakenly believe this clause guarantees they'll be notified if the policy cancels. It doesn't. It shifts the obligation to "policy provisions," which may not require notice to certificate holders at all.
What to do instead: Set a calendar reminder 30 days before the policy expiration date shown on the certificate. Proactively request a renewal certificate. If the insured doesn't respond or the policy lapsed, you have time to stop work before a coverage gap creates risk.
Section 8: Authorized Representative
Location: Bottom right, signature line.
What it shows: The signature of the producer (broker/agent) issuing the certificate.
What to check: Most certificates are digitally generated and don't have a wet signature. Instead, they show the producer's name in print and may include a digital timestamp.
Some certificate holders require a signed original. If yours does, request it explicitly. Otherwise, an unsigned digital certificate is standard.
What it doesn't verify: That the producer is authorized to bind coverage or issue endorsements. The certificate is informational only. If you need changes (additional insured added, limits increased), those require carrier approval — the broker can't unilaterally modify the policy.
The Disclaimer (and Why It Exists)
The bottom of the ACORD 25 includes this in all-caps:
"THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER. THIS CERTIFICATE DOES NOT AFFIRMATIVELY OR NEGATIVELY AMEND, EXTEND OR ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW. THIS CERTIFICATE OF INSURANCE DOES NOT CONSTITUTE A CONTRACT BETWEEN THE ISSUING INSURER(S), AUTHORIZED REPRESENTATIVE OR PRODUCER, AND THE CERTIFICATE HOLDER."
Translation: The certificate is not the policy. It doesn't create coverage. It doesn't change coverage. It's a snapshot that may or may not be accurate.
This disclaimer exists because of years of litigation where certificate holders sued insurers for coverage based on what a certificate said, even when the actual policy didn't include that coverage.
The courts consistently ruled that the certificate is not binding. The policy is the contract. The certificate is informational.
Practical implication: If your contract requires specific coverage and the certificate lists it, that's a good sign — but it's not proof. For high-stakes contracts (large construction projects, long-term vendor agreements), verify coverage directly with the carrier or request copies of the actual endorsements.
The Five Fields Where Mistakes Hide
After reviewing thousands of certificates, these are the most common error points:
1. Insured name mismatch
The certificate shows "John Smith DBA Acme Roofing" but your contract is with "Acme Roofing LLC." At claim time, the carrier denies because the named insured doesn't match the contracting party.
Fix: Verify the insured name matches the legal entity on your contract before accepting the certificate.
2. Expired coverage
The certificate shows a policy expiration date that's already passed. The insured's broker generated the cert from cached data and didn't notice the renewal hadn't processed yet.
Fix: Check the expiration date against today's date. If it's within 30 days of expiring, ask for a renewal certificate now.
3. Description says "additional insured" but no endorsement exists
The broker typed "additional insured per contract" in the description box without actually requesting the endorsement from the carrier.
Fix: For critical contracts, ask for a copy of the endorsement form (CG 20 33 or similar). If the insured can't produce it, the coverage doesn't exist.
4. Limits don't meet contract minimums
Your contract requires $2M aggregate, the certificate shows $1M. The insured either didn't read the contract requirements or hopes you won't notice.
Fix: Reject the certificate and require the insured to increase limits or purchase an umbrella policy to meet the shortfall.
5. Wrong certificate holder name or address
The certificate lists "ABC General Contracting" but your legal entity is "ABC General Contracting Inc." Close, but not exact.
Fix: Request a corrected certificate with your exact legal name. The carrier's system may reject claims where the holder name doesn't match.
How to Verify a Certificate Is Real
Certificate fraud is rare but exists. Subcontractors desperate to get on a job have been known to fabricate certificates using blank ACORD forms.
Red flags: - No NAIC numbers listed for insurers - Insurer names you've never heard of (Google them — do they exist?) - Policy numbers that don't match standard formats (most are 8-12 alphanumeric characters; a number like "12345" is suspicious) - Typos or formatting inconsistencies - The producer contact info doesn't match the insured's known broker
How to verify: 1. Call the producer directly. Use the phone number from the certificate. Ask them to confirm they issued it. 2. Search the insurer's name + NAIC number. Verify they match and the company is licensed in your state. 3. Use the carrier's verification hotline. Many large carriers (Travelers, Liberty Mutual, Hartford, CNA) have dedicated phone lines or online portals where you can verify a policy is active by entering the policy number and insured name. 4. Request the policy dec page. If you're not confident, ask the insured to provide the declarations page from the actual policy. This shows all coverages, endorsements, and limits in detail — much harder to fake than a one-page certificate.
What to Ask Your Broker
When you need a Certificate of Insurance issued for your business:
-
How fast can you turn around a COI request? If the answer is "24-48 hours," find a faster broker. Certificate generation is data entry. It should take minutes.
-
How do I request a certificate after hours? Holders don't only ask Monday through Friday. If the answer is "leave a voicemail," every Friday-afternoon request becomes a Monday problem.
-
Do you track certificate expirations and send renewal reminders? Good brokers proactively send updated certificates to all your certificate holders when your policy renews. If yours doesn't, you're managing that manually.
-
What endorsements are already on my policy? Know what's blanket-covered vs. what needs to be added per request. If you have CG 20 33 (blanket AI), you can issue certificates with AI language immediately. If you don't, each new certificate holder requiring AI status needs underwriting approval.
-
Can you add a certificate holder to my policy's system so they auto-receive renewal notices? Some carriers allow this. Most don't, but it's worth asking.
-
What's the process if a certificate holder disputes something on the cert? Know whether your broker handles disputes directly or punts them back to you.
How Tenet Handles Certificates
We issue Certificates of Insurance on a published 15-minute SLA — around the clock, nights and weekends included. Email the request, or forward the holder's requirements exactly as you received them; our system reads them either way.
Every request workflow asks: - Who's the certificate holder? (name and full address) - What endorsements do they need? (additional insured, waiver of sub, P&NC) - Is there a project description or location to include? - When do you need it by?
If you're set up with blanket additional insured coverage, we issue the certificate immediately. If you need an endorsement added, we route it to underwriting and notify you when it's done — usually same-day.
We also track all issued certificates and send you (and the holder) updated versions automatically when your policy renews. You don't have to remember who needs what.
Start an application or read our guide on Additional Insured vs. Certificate Holder to see how insurance should work when you're trying to run a business.