the last version with xp support is 49.
but, if i'm getting blocked due to not having tls 1.3, then firefox 52 would have to have tls 1.3, too, and that's certainly untrue.
it does, however, have tls 1.2.
i think that should be the end fix, but let's find out.