WinHTTP returns ERROR_WINHTTP_SECURE_INVALID_CERT on almost every SSL website

I made a test application that uses our winhttp.dll to crawl websites and return its content length. it works on http sites, but when it tries to test https sites, fails with error ERROR_WINHTTP_SECURE_INVALID_CERT, this error is returned by line 110 in dll/win32/winhttp/net,c

https://git.reactos.org/?p=reactos.git;a=blob;f=dll/win32/winhttp/net.c;hb=10c9aa067f3f64f4828f77dbd385ca70ce15b4b5#l110

Only a couple of https sites can be loaded (google.com and twitter.com), while any other site (tested facebook.com, bing,com and every *.reactos.org subdomain) fails with the mentioned error code.

Seems that we are failing with cert validation, specially those signed by Let's Encrypt.

Attached the test application and his source code, needs FreeBasic to be compiled.