Download & verify Gandi's intermediate CA

Because: http://freenode.net/irc_servers.shtml#ssl

Note that this is still not included in your system's trusted CAs list.