I don't understand the tech: could it be the case that an older machine is missing CA roots that causes it to reject legitimately-signed code? I had to disable

I don't understand the tech: could it be the case that an older machine is missing CA roots that causes it to reject legitimately-signed code? I had to disable SB to boot the installer for either F39 or Mint 22, i forget which, on an old laptop.