status command doesn't tell you if the connection is using SSL. Clients can disable using SSL from their side.
show session status and look for
Ssl_finished_accepts to find the number of connections using SSL.
These numbers increase when a new connection is made to the MySQL server using SSL.
Note that the variable
Ssl_client_connects reflects the number of SSL connection attempts to an SSL-enabled replication source server, and has nothing to do with client applications connecting to the MySQL server that are using SSL.
See Ssl_client_connects (MySQL Documentation)
Most client applications (e.g. a PHP application) do not automatically use SSL connections when connecting to a database server. Most of the times you have to perform additional steps to securely connect to a remote database.
One of the easiest ways to ensure all connections to your database use a secure connection, is to require secure transport altogether. For MySQL you can use
SET GLOBAL require_secure_transport=1;. Once enabled, any insecure connection will fail.