CVC can be 3 OR 4 chars long