The open-source browser vendor offers a $10,000 bug bounty for flaws found in a new SSL certificate validation library.