TLS carries non-trivial overhead, especially for the initial request, due to the handshake. However, once established, HTTP/2 encapsulation can mitigate these costs.
40ms here is quite high, when the static page also load at 40ms...
Behind a WordPress or similar, these 40ms does not matter though. :reverse_grimacing: