Please make the use of system-wide CA certificate store the same in all tool/commands. - If ```tls.CAFile``` is not specified in ```mongod/mongos``` configuration then the system-wide CA certificate store will be used. - If ```--sslCAFile``` is not specified in ```mongoimport/mongoexport``` tool then the system-wide CA certificate store will be used - but this behavior is not documented. - For ```mongosh``` you have to specify option ```--tlsUseSystemCA``` is you like to use the system-wide CA certificate store. I did not check how it is/was working in legacy ```mongo``` shell. - For command ```Mongo()``` (https://www.mongodb.com/docs/v6.0/reference/method/Mongo/), I was not able to find out, how to use the system-wide CA certificate store - If you add ```tlsUseSystemCA=true``` to connection string URI, then you get an error So, there are several ways for doing that. There should be a consistent way across all tools