They must have their server set to request client certificates. Even with that on, most people will see nothing as browsers will only show that dialog if they have any client certificates registered that the remote site will accept (wrt the signing CA).