A certificate that reports one test result on one vial extrapolates to claim that all two hundred vials in the lot are identical, which is an assumption worth questioning.
The sample size determination requires choosing a confidence level and an acceptable error rate, and the smaller the error rate you want, the larger your sample must be.
The ICH Q3A and Q3B thresholds for reporting, identification and qualification of impurities are the framework the pharmaceutical industry works to, and they are worth reading even though nothing in the research-grade supply chain is obliged to meet them, because they tell you which numbers a competent analyst would consider worth reporting at all.
I would treat a "complies with" statement without sampling details as a claim rather than as evidence.
In practice: ask for the chromatogram, check the method section, check the lot number against the vial, and set your accept threshold before you see the result rather than after.