It's preferable to reverse the order here from TLSv1.2 down to SSLv3.

That said, I think we should also consider excluding SSLv3. The protocol is over 10 years old, has been after it's  unofficial release by Netscape almost instantly been superseded by TLSv1. Further, by disallowing SSLv3, we also disable downgrading attacks to SSLv3 ;)