@carfox Windows XP can't use ECC (elliptic curve cryptography) certificates. Most likely those sites use certificates, where ECC technology is used.