rawNonce

The unhashed nonce. The server compares SHA-256 of this to the token's nonce claim.