pub const CERT_EXCLUDED_SUBTREE_BIT: i32 = -2147483648i32;