diff --git a/weboob/browser/nss.py b/weboob/browser/nss.py
index b35de250ac61823efd7a7e62ea24945075a096ae..7e9802732ce5c89a7ca2de27061e6ad6da12de51 100644
--- a/weboob/browser/nss.py
+++ b/weboob/browser/nss.py
@@ -31,6 +31,7 @@
 from functools import wraps
 from io import RawIOBase, BufferedRWPair
 import os
+import re
 import socket
 import ssl as basessl
 import subprocess
@@ -56,7 +57,9 @@
 
 
 def certificate_db_filename():
-    version = tuple(int(x) for x in nss.nss.nss_get_version().split('.'))
+    version_str = nss.nss.nss_get_version()
+    version_str = re.match(r'\d+\.\d+', version_str).group(0) # can be "3.21.3 Extended ECC"
+    version = tuple(int(x) for x in version_str.split('.'))
     # see https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.35_release_notes
     if version < (3, 35):
         return 'cert8.db'