We have just enabled ircv3 sts on our network discovering that mIRC has the wrong domain (is using .net instead of .com) in his servers list for our roundrobin, so users get an invalid certificate and can't connect.
I don't know if it's the right place to ask a fix for this.