Sometimes, nss_get_version will return "3.21.3 Extended ECC" which can't be parsed. Trim junk to be able to parse it.