Alright, well it's not like I'm anywhere near writing a client or a relay with my nostr stack, but at least my websocket library can support this scheme when the time comes. When you have a relay IP + self-signed cert fingerprint (the sha256 hash of the certificate), you can inject a custom dialer for it and establish a websocket connection.
https://git.wisehodl.dev/jay/go-honeybee/releases/tag/v0.5.0
