check eof in TbsCertificate