I understand SSL is the predecessor of TLS. What about EV SSL? We are using a payment gateway that is rolling out a change soon and will require TLS1.1 or higher. We are currently using a SSL from Godaddy and they said that if we want to upgrade the highest they have is EV SSL. Wanted to understand if EV SSL is equivalent to TLS1.1 or lower.
I think there's a mismatch in terminology between the SSL/TLS protocol (messages sent over a network) and SSL Certificate Authorities who issue digital certificates to be used with TLS/SSL and / or other crypto protocols.
You are correct that SSL is the pre-cursor to TLS. This refers to crypto configuration in your server with higher versions indicating more modern crypto:
SSL 1.0 (obsolete) SSL 2.0 (obsolete) SSL 3.0 (mostly obsolete) TLS 1.0 TLS 1.1 TLS 1.2
These are settings you configure in your webserver, and govern which crypto a browser will use when connecting to your server. You do need a certificate for your server in order to enable SSL/TLS, but for the most part, any certificate you get from a CA can be used with any version of TLS.
SSL Certificate Authorities
A Certificate Authority issues certificates for use with TLS and / or other crypto protocols like S/MIME email, signing PDF documents, etc. Most CAs market their "web server" type certs as "SSL" rather than "TLS" for historical reasons. Most CAs offer various price points of certificate, usually broken into:
Domain Validated (DV) Organization Validated (OV) Extended Validation (EV)
This refers to how much time their humans spend doing background checks to ensure that you do in fact own the that web site that you are requesting a cert for. They check things like: can you post a file they provide somewhere on the site? Does the DNS record for that domain list you as the owner? If the DNS record lists a company, are you in fact an employee with authorization to request certificates on behalf of that company? And so on, with DV certs just doing the automated "can you upload a file?" checks, and EV sometimes requiring face-to-face meetings between you and the CA, and original hand-signed documents from the CEO.
Consequently, browsers display bigger, greener lock icons for EV to indicate to users that the browser is extra confident that this is not a phishing site. (EV certs are where you see the legal name of the company as part of the TLS lock icon). Note that bigger greener locks have nothing to do with the type of crypto or version of TLS used.
Bottom line: The level of certificate you buy (DV, OV, EV) and the version of TLS that you configure your server for (SSLv3, TLS1.2, etc) have almost nothing to do with each other. All levels of certificate use the same type of cryptography, and and all certs are compatible with all versions of the TLS protocol.
They are orthogonal. There are protocols (SSL, TLS) and there are certificates (DV, EV) that are used in the process of connection/session establishment.
An EV or extended validation certificate simply means that your organization has gone through the most extensively currently defined verification process for obtaining an x.509, or SSL certificate. This is in no way related to the SSL or TLS session negotiation and establishment process.
Any type of certificate (domain validated (DV), organization validated (OV), or extended validation (EV), certification may be used to establish an SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, or TLS 1.2 (and soon TLS 1.3) session. Your server configuration will determine which SSL/TLS protocols are supported, not the certificate validation type.