How to reject unvalidated SSL client connections from the MongoDB server?
There was an issue opened on MongoDB Jira: https://jira.mongodb.org/browse/COMPASS-3369

TL;DR Compass allows connections with invalid certificates and it won't be fixed.