* Fix device ID check in cal0 backup path
Only the ECC device certificate was used, which may be absent on some devices. Adds a fallback to use the RSA device certificate which is present on those.
* Move cert validity check into device ID check
* Fix ecc case condition
in cases where ECC is not blank and not valid, instead of aborting, it falls through to RSA