Image from CDN without ssl negotiation

Can someone help me understand how nytimes is able to download images from their cdn without having a dns/ssl negotiation before :


WPT probably missed the DNS lookup but there is no connection setup because they are using HTTP/2 connection coalescing (using the same cert across both and DNS resolving to the same address). If you look at the connection view, you can see all of the origins that are coalesced to the main connection.