It doesn't work either because it depends on DSA certificates.
Yep. Time to give up on anyone using a browser that depends on XP's SSL support. Much like SSLv3, they will get the message when the entire Internet stops loading in their browser.
They will get the message to randomly download some thing from the net that fixes their problem, if they're lucky it will be as well-behaved as Superfish.
IE8 on XP is basically totally busted:
https://www.ssllabs.com/ssltest/viewClient.html?name=IE&vers...