We should care about `''` - it is a valid SSL Common Name, and if someone really wants to verify that the CN is `''`, then she should be allowed to.