does not correctly handle wildcard certificates.

[jrwren]

[kittens] WARN Error connecting: x509: certificate is valid for *.freenode.net, freenode.net, not chat.us.freenode.net

The certificate only covers up to one subdomain level of depth.

So, it looks like you should not be using chat.us.freenode.net given that certificate's scope.