diff --git a/nefed.xml b/nefed.xml
index 623c95553a846b40679968bc649f485c658ecd16..b580aa889144421086f4c16e0875d1b5e356ec9a 100644
--- a/nefed.xml
+++ b/nefed.xml
@@ -29999,7 +29999,24 @@ and do *NOT* provide it in real time to your partners.
     </EntityDescriptor>
     <EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_2da05d7ce12a0d76d91d299b8c6c5c8c3c0d1345"
     entityID="https://its-hsapd.nebraska.edu">
-    <Extensions>
+    <Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
+        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" />
+        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" />
+        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
+        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224" />
+        <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
+        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" />
+        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" />
+        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" />
+        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224" />
+        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" />
+        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" />
+        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
+        <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" />
+        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1" />
+        <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
+        <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" />
+        
         <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
         <mdattr:EntityAttributes>
             <saml:Attribute Name="http://macedir.org/entity-category"
@@ -30021,25 +30038,6 @@ and do *NOT* provide it in real time to your partners.
             </mdui:Logo>
         </mdui:UIInfo>
     </Extensions>
-    <Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
-        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" />
-        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" />
-        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
-        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224" />
-        <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
-        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" />
-        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" />
-        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" />
-        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224" />
-        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" />
-        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" />
-        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
-        <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" />
-        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1" />
-        <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
-        <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" />
-    </Extensions>
-
     <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
         <Extensions>
             <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"