When a policy has a wildcard as url parameters (after the ?), it does not match a resource which does not have any.
For example the policy
does not match the resource
however it works fine so long as there are parameters there. This means there is no policy which will match http://fqdn.example.com:80/context?