If the extracerts is specified, it is the filename of a file containing a bunch of certificates to use as untrusted CAs.
If the cainfo is specified, it should hold information about the trusted CA certificates to use in the verification process - see certificate verification for more information about this parameter.