If port 8140 was returning a certificate with

CA:TRUE

to the TLS handshake, that's something someone would had to have gone out of their way to configure.