code: func (gServer *GRPCServer) removeClientRootCA(clientRoot []byte) error {
  
  	errMsg := "Failed to remove client root certificate(s): %s"
  	//convert to x509
  	certs, subjects, err := pemToX509Certs(clientRoot)
  	if err != nil {
  		return fmt.Errorf(errMsg, err.Error())
  	}
  
  	if len(certs) < 1 {
  		return fmt.Errorf(errMsg, "No client root certificates found")
  	}
  
  	for i, subject := range subjects {
  		//remove it from our clientRootCAs map using subject as key
  		//check to see if we have match
  		if certs[i].Equal(gServer.clientRootCAs[subject]) {
  			delete(gServer.clientRootCAs, subject)
  		}
  	}
  	return nil
  }
docs: // internal function to remove a PEM-encoded clientRootCA