If there are two or more predicates applied to a policy, then the predicates are applied in the order they appear in the table that displays policies on the main Policy page. When multiple predicates use the same attributes to specify their requirements, the predicates that appear toward the bottom of the table take precedence over those that appear at the top.
For example, if the first predicate for a policy contains the following expression to set the minimum key length to 512 bits:
Type=="client" AND Usage=="code_sign"
And a subsequent predicate for the same policy contains the same expression but specifies a minimum key length as 1024 bits, then the minimum key length would be 1024 for clients whose usage was "code_sign."
To reorder predicate precedence in policies:
On the Policy page of the Configuration Management tab, select the type of policy in which you want to reorder predicate precedence from the View Policies For list. A list of policies for that operation type displays.
Select the policy you want to modify by clicking the radio button adjacent to the Policy Name and click Edit. The Edit page appears, displaying the Parameter Details and the Predicates Details.
In the Predicates Details region, click Reorder. A predicate reorder list page appears.
In the predicate reorder list, select the predicate you want to reorder and click the arrows to move the predicate up and down in the list. Note: Predicates that appear at the top of the list are applied to a request first; those that appear at the bottom of the list are applied last.
Click OK to save your changes and to return to the edit page.
If needed, then make additional changes to the policy on the edit page, and click OK to save them and to return to the main Policy page.
Restart the Oracle Certificate Authority server for your changes to take effect. See Starting and Stopping Oracle Certificate Authority Server
Adding Predicates to Policy Rules