As mentioned, the TLS session is probably not cached yet, following requests should be faster.

However it's possible Citrix is just not as optimized as other providers/services or not support newer protocols like TLS 1.3

However, 100ms doesn't seem critical