J4pClientBuilder can hardly be extended to tune HTTP Client connection.
Basically, making J4pClientBuilder#getSocketFactoryRegistry method protected would allow to inject a custom TrustManager in the SSLContext.