Chrome says "This certificate has been revoked". It has SHA1 fingerprint 0C F0 6A F0 5C C4 C4 44 E1 DB 92 25 F0 99 4F EC 6B 5E 4A B5 and was issued 2014-04-08 00:00.
Did they renew a certificate after patching for Heartbleed, but then revoke it?
Going directly to https://aws.amazon.com/s3/ keeps the SSL cert, which does not seem to be revoked and is issued at 4/8/14.
SHA1 fingerprint:
E0 D2 E0 2E 20 F2 CE 80 AE 16 93 CA 86 2C 5A 14 54 26 28 F5
EDIT: Now 45 minutes later https://s3.amazonaws.com responded with a REVOKED certificate issued 4/8/14, SHA1 fingerprint:
0C F0 6A F0 5C C4 C4 44 E1 DB 92 25 F0 99 4F EC
6B 5E 4A B5
I failed to grab initial https://s3.amazonaws.com cert that passed chrome revocation list check. Which could have been also due to the revocation service timeout because in that case AFAIK no revocation check is performed and cert is silently accepted.
Did they renew a certificate after patching for Heartbleed, but then revoke it?