Makes no sense to me, but it turns out you have to schedule a tech to come out and drop off the certificate in person. Comcast knows what you have and can look at your system remotely. But that is the deal. I have scheduled my appointment.
I just know a few years ago when I signed up, you could download one from the portal. But maybe my memory is failing.