What version of TLS is required when connecting to SSL port 8883?

1.0, 1.1 and 1.2 is supported by default.

CloudMQTT can do some custom configuration on instances to only allow one, e.g. 1.2 (on dedicated instances).