SSLServerHasCertificateAuthority is false but the certificate is signed by a trusted CA
As MongoDB BOL documentation here to connect to a mongod or mongos instance that requires encrypted communication, start mongo shell with --ssl and include the --sslCAFile to validate the server certificates.

mongo --ssl --host hostname.example.com --sslCAFile /etc/ssl/ca.pem


For example, given an TLS/SSL certificate located at /etc/ssl/mongodb.pem, configure mongod to use TLS/SSL encryption for all connections with the following command:

mongod --sslMode requireSSL --sslPEMKeyFile /etc/ssl/mongodb.pem &lt;additional options&gt;


Set Up mongod and mongos with Certificate Validation

To set up mongod or mongos for TLS/SSL encryption using an TLS/SSL certificate signed by a certificate authority, include the following run-time options during startup:


net.ssl.mode set to requireSSL. This setting restricts each server to
use only TLS/SSL encrypted connections. You can also specify either
the value allowSSL or preferSSL to set up the use of mixed TLS/SSL
modes on a port. See net.ssl.mode for details.
PEMKeyfile with the    name of the .pem file that contains the
signed TLS/SSL certificate    and key.
CAFile with the name of the .pem file that contains the root
certificate chain from the Certificate Authority.



  Note:
  
  
  Specify the  file and the  file with either the full path
  name or the relative path name.
  If the  is encrypted, specify
      the passphrase. See TLS/SSL
      Certificate Passphrase.
  


You may also specify these options in the  configuration file, as in the following examples:

If using the YAML configuration file format, include the following configuration in the file:

net:
   ssl:
      mode: requireSSL
      PEMKeyFile: /etc/ssl/mongodb.pem
      CAFile: /etc/ssl/ca.pem


Connect to MongoDB Instance that Requires Client Certificates

To connect to a mongod or mongos that requires CA-signed client certificates, start the mongo shell with --ssl, the --host option to specify the host to which to connect, the --sslPEMKeyFile option to specify the signed certificate-key file, and the --sslCAFile to validate the server certificates.

mongo --ssl --host hostname.example.com --sslPEMKeyFile /etc/ssl/client.pem --sslCAFile /etc/ssl/ca.pem