Test a policy against a request before it can block anyone.
As pki-admin
Open /policies
Click New policy
The new policy panel: name, CA, algorithms, RSA bits, validity, flags
Click Edit Baseline
Pick Algorithm RSA-2048 in the Dry run card
Click Run dry run