: Resolves the issue where Windows XP SP3 or Server 2003 SP2 clients cannot obtain or validate certificates from a CA configured with SHA2-256 or higher encryption.
(Note: Support for Windows XP Service Pack 2 ended on July 13, 2010, making SP3 the baseline for secure operations in legacy environments.) windows xp kb 968730 x86 ptb hotfix