Made an extra entry point called: NewBitcoindClientSSL
It takes the extra tls server certificate as parameter.
It leaves the original NewBitcoindClient untouched.