Comodo is just cross-signing CF certs[1] because the CF Origin CA is not yet in browser trust stores. GlobalSign and Digicert also cross-sign CF certs.

[1] https://blog.cloudflare.com/universal-ssl-encryption-all-the...