remove dead code
check root and idcerts exist