Sometimes the Session-ID is simply empty. In this case sslyze will incorrectly report that session-id reuse is enabled because session1_id == session2_id.