[Fire Android Development] DragonFire1024:
Here goes. Not sure if this will be helpful.

On my HD 10:

/systm/etc/security/otacerts.zip : releasekey.x509.pem

Output:

Owner: EMAILADDRESS=kindle-cs-support@amazon.com, CN=Amazon, OU=Amazon, O=Amazon-1, L=Sunnyvale, ST=California, C=US
Issuer: EMAILADDRESS=kindle-cs-support@amazon.com, CN=Amazon, OU=Amazon, O=Amazon-1, L=Sunnyvale, ST=California, C=US
Serial number: bd9c7b49cf0b4c1a
Valid from: Wed Nov 30 17:32:46 EST 2016 until: Sun Apr 17 18:32:46 EDT 2044
Certificate fingerprints:
MD5: 9B:8C:C2:12:4A:B9:F4:F2:DE:39:1E:49:A5:B9:63:7A
SHA1: 4D:BE:39:E9:26:93:48:0C:24:B5:77:97:68:26:5D:8C:7F:C0:FC:7D
SHA256: 2B:0A:C4:92:47:98:3A:47:49:6E:A0:3F:96:FD:11:7A:76:5E:24:83:85:78:54:4B:38:9C:8E:44:0E:DD:5D:88
Signature algorithm name: SHA1withRSA
Subject Public Key Algorithm: 2048-bit RSA key
Version: 3

Extensions:

#1: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: C0 26 3C 8B 34 90 A2 31 1C F0 0B 05 32 25 07 52 .&<.4..1....2%.R
0010: C7 7F 30 1E ..0.
]
]

#2: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
CA:true
PathLen:2147483647
]

#3: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: C0 26 3C 8B 34 90 A2 31 1C F0 0B 05 32 25 07 52 .&<.4..1....2%.R
0010: C7 7F 30 1E ..0.
]
]

That certificate matches the one in Amazon's update.bin:

/META-INF/CERT.RSA

Output:

Owner: EMAILADDRESS=kindle-cs-support@amazon.com, CN=Amazon, OU=Amazon, O=Amazon-1, L=Sunnyvale, ST=California, C=US
Issuer: EMAILADDRESS=kindle-cs-support@amazon.com, CN=Amazon, OU=Amazon, O=Amazon-1, L=Sunnyvale, ST=California, C=US
Serial number: bd9c7b49cf0b4c1a
Valid from: Wed Nov 30 17:32:46 EST 2016 until: Sun Apr 17 18:32:46 EDT 2044
Certificate fingerprints:
MD5: 9B:8C:C2:12:4A:B9:F4:F2:DE:39:1E:49:A5:B9:63:7A
SHA1: 4D:BE:39:E9:26:93:48:0C:24:B5:77:97:68:26:5D:8C:7F:C0:FC:7D
SHA256: 2B:0A:C4:92:47:98:3A:47:49:6E:A0:3F:96:FD:11:7A:76:5E:24:83:85:78:54:4B:38:9C:8E:44:0E:DD:5D:88
Signature algorithm name: SHA1withRSA
Subject Public Key Algorithm: 2048-bit RSA key
Version: 3

Extensions:

#1: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: C0 26 3C 8B 34 90 A2 31 1C F0 0B 05 32 25 07 52 .&<.4..1....2%.R
0010: C7 7F 30 1E ..0.
]
]

#2: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
CA:true
PathLen:2147483647
]

#3: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: C0 26 3C 8B 34 90 A2 31 1C F0 0B 05 32 25 07 52 .&<.4..1....2%.R
0010: C7 7F 30 1E ..0.
]
]

This is the CERT.SF in Amazon's update.bin:

/META-INF/CERT.SF

Output:

Signature-Version: 1.0..Created-By: 1.0 (Android SignApk)..SHA1-
Digest-Manifest: bbey1WorVyuRFPJGx0l2+xKP9Pc=....Name: system/bu
ild.prop..SHA1-Digest-Manifest: aILkToMjTnG+q7VSMgNhgC9H5jw=....
Name: file_contexts..SHA1-Digest-Manifest: GOX4Ec4+DDejykr56yJfH
i/Sm9A=....Name: boot.img..SHA1-Digest-Manifest: jhBrPXWkepI826y
Y8aWjHB2atB4=....Name: META-INF/com/google/android/update-binary
..SHA1-Digest-Manifest: MD7ZuDIJeQPKQzArUEOXZxMv35w=....Name: sy
stem.transfer.list..SHA1-Digest-Manifest: MOfayGsKoEADWHNaD9aB5+
MHmuA=....Name: META-INF/com/amazon/android/target.build.prop..S
HA1-Digest-Manifest: uwKETqV05rKRz1f0vA8rcaMqOUs=....Name: syste
m.patch.dat..SHA1-Digest-Manifest: 774VWw1Wa8Y+IPKHHCeM6N//yzE=.
...Name: META-INF/com/google/android/updater-script..SHA1-Digest
-Manifest: GxQim3Z5xX5wSOnURr8yW3vVwN4=....Name: ota.prop..SHA1-
Digest-Manifest: 27EWXh2OYP/eOE28P6W2nqxEcy0=....Name: images/pr
eloader.bin..SHA1-Digest-Manifest: Ppz6bcZ4+gdPofs3cC9zQqeVeOI=.
...Name: META-INF/com/amazon/android/target.system.map..SHA1-Dig
est-Manifest: PZOLPGPzHys40UmOUCmVbNLzBEI=....Name: images/lk.bi
n..SHA1-Digest-Manifest: FLsLgg4h6fEh8MDJcaOoqlGwm+8=....Name: M
ETA-INF/com/android/metadata..SHA1-Digest-Manifest: 72zZgSowU1WQ
Ct3NH+qrIm8HHqA=....Name: META-INF/com/android/otacert..SHA1-Dig
est-Manifest: FFqm2i7BCIc37w4/6AcCGcgoQ1Y=....Name: META-INF/com
/amazon/android/target.system.devicepath..SHA1-Digest-Manifest:
7VrqnRBSt3ZQSGsmUgcoinIRoto=....Name: images/preloader.hdr0..SHA
1-Digest-Manifest: fI8j5ZEWsUhCd7JPLaxhzIt4Mog=....Name: images/
tz.img..SHA1-Digest-Manifest: uy+yePoyFvAQwpGdxmiKvr50T6Q=....Na
me: images/preloader.hdr1..SHA1-Digest-Manifest: 1HnB7HnwQ6uz3Dn
1KElyZM7g4Ws=....Name: META-INF/com/amazon/android/target.system
.map.sha1..SHA1-Digest-Manifest: eKdjK8IeVv7Pt6YsuLQioh2G+DU=...
.Name: META-INF/com/amazon/android/target.blocklist..SHA1-Digest
-Manifest: Vv04EVN9Culu7Yf6Q1uj1WrtKSg=....Name: META-INF/com/am
azon/android/check-binary..SHA1-Digest-Manifest: XKjbqSQnjKe+BkI
ExQJguN+lkmQ=....Name: system.new.dat..SHA1-Digest-Manifest: 7ih