root-certs: use hasOwnProperty check instead of __proto__=null.