diff --git a/radsecproxy.conf.5.in b/radsecproxy.conf.5.in
index b68eb91..1f3946f 100644
--- a/radsecproxy.conf.5.in
+++ b/radsecproxy.conf.5.in
@@ -794,7 +794,8 @@ The password to decrypt the private-key.
 .BI "PolicyOID " oid
 .RS
 Require the peers certificate to adhere to the policy specified by \fIoid\fR.
-This can be specified multiple times.
+When specified multiple times at least one policy must be valid in the peer
+certificate.
 .RE
 
 .BR "CRLCheck (" on | off )