allow blank common name for group level