Looks like their cert for https://www.comcast.com/ is fine, so this problem is only with the 'contracts' subdomain. I'm guessing that's a low traffic/priority section for them.

They should buy a wildcard cert for *.comcast.com and be done with it.