diff --git a/CHANGELOG.md b/CHANGELOG.md
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Change log for "tls"
 
+## Version 2.2
+
+* Using crypton-asn1-* and time-hourglass.
+  [#512](https://github.com/haskell-tls/hs-tls/pull/512)
+* Major version up due to re-exports.
+
 ## Version 2.1.14
 
 * Supporting P384 and P521 curves.
diff --git a/tls.cabal b/tls.cabal
--- a/tls.cabal
+++ b/tls.cabal
@@ -1,6 +1,6 @@
 cabal-version:      >=1.10
 name:               tls
-version:            2.1.14
+version:            2.2.0
 license:            BSD3
 license-file:       LICENSE
 copyright:          Vincent Hanquez <vincent@snarc.org>
@@ -113,69 +113,31 @@
         Network.TLS.Wire
         Network.TLS.X509
 
+    default-language:   Haskell2010
     default-extensions: Strict StrictData
-    default-language: Haskell2010
-    ghc-options:      -Wall
+    ghc-options:        -Wall
     build-depends:
         base >=4.9 && <5,
-        asn1-encoding >= 0.9 && < 0.10,
-        asn1-types >= 0.3 && < 0.4,
         base16-bytestring,
-        bytestring >= 0.10 && < 0.13,
-        cereal >= 0.5.3 && < 0.6,
-        crypton >= 0.34,
-        crypton-x509 >= 1.7 && < 1.8,
-        crypton-x509-store >= 1.6 && < 1.7,
-        crypton-x509-validation >= 1.6.13 && < 1.7,
+        bytestring >=0.10 && <0.13,
+        cereal >=0.5.3 && <0.6,
+        crypton >=0.34,
+        crypton-asn1-encoding >= 0.10.0 && < 0.11,
+        crypton-asn1-types >= 0.4.1 && < 0.5,
+        crypton-x509 >=1.8 && <1.9,
+        crypton-x509-store >=1.8 && <1.9,
+        crypton-x509-validation >=1.8 && <1.9,
         data-default,
         ech-config,
         hpke,
-        memory >= 0.18 && < 0.19,
-        mtl >= 2.2 && < 2.4,
-        network >= 3.1,
-        random >= 1.2 && < 1.4,
-        serialise >= 0.2 && < 0.3,
-        transformers >= 0.5 && < 0.7,
-        unix-time >= 0.4.11 && < 0.5,
-        zlib >= 0.7 && < 0.8
-
-test-suite spec
-    type:               exitcode-stdio-1.0
-    main-is:            Spec.hs
-    build-tool-depends: hspec-discover:hspec-discover
-    hs-source-dirs:     test
-    other-modules:
-        API
-        Arbitrary
-        Certificate
-        CiphersSpec
-        ECHSpec
-        EncodeSpec
-        HandshakeSpec
-        PipeChan
-        PubKey
-        Run
-        Session
-        ThreadSpec
-
-    default-extensions: Strict StrictData
-    default-language:   Haskell2010
-    ghc-options:        -Wall -threaded -rtsopts
-    build-depends:
-        base >=4.9 && <5,
-        QuickCheck,
-        asn1-types,
-        async,
-        base64-bytestring,
-        bytestring,
-        crypton,
-        crypton-x509,
-        crypton-x509-validation,
-        ech-config,
-        hourglass,
-        hspec,
-        serialise,
-        tls
+        memory >=0.18 && <0.19,
+        mtl >=2.2 && <2.4,
+        network >=3.1,
+        random >=1.2 && <1.4,
+        serialise >=0.2 && <0.3,
+        transformers >=0.5 && <0.7,
+        unix-time >=0.4.11 && <0.5,
+        zlib >=0.7 && <0.8
 
 executable tls-server
     main-is:            tls-server.hs
@@ -190,8 +152,8 @@
     ghc-options:        -Wall -threaded -rtsopts
     build-depends:
         base >=4.9 && <5,
-        bytestring,
         base16-bytestring,
+        bytestring,
         containers,
         crypton,
         crypton-x509-store,
@@ -226,7 +188,7 @@
         crypton-x509-system,
         ech-config,
         network,
-        network-run >= 0.5,
+        network-run >=0.5,
         tls
 
     if flag(devel)
@@ -234,9 +196,11 @@
     else
         buildable: False
 
-benchmark tls-bench
-    main-is: Benchmarks.hs
-    type: exitcode-stdio-1.0
+test-suite spec
+    type:               exitcode-stdio-1.0
+    main-is:            Spec.hs
+    build-tool-depends: hspec-discover:hspec-discover
+    hs-source-dirs:     test
     other-modules:
         API
         Arbitrary
@@ -250,29 +214,64 @@
         Run
         Session
         ThreadSpec
-    hs-source-dirs:
-        Benchmarks
-        test
+
     default-language:   Haskell2010
-    ghc-options: -Wall
+    default-extensions: Strict StrictData
+    ghc-options:        -Wall -threaded -rtsopts
     build-depends:
         base >=4.9 && <5,
+        QuickCheck,
+        async,
+        base64-bytestring,
         bytestring,
+        crypton,
+        crypton-asn1-types,
+        crypton-x509,
+        crypton-x509-validation,
+        ech-config,
+        hspec,
+        serialise,
+        time-hourglass,
+        tls
+
+benchmark tls-bench
+    type:             exitcode-stdio-1.0
+    main-is:          Benchmarks.hs
+    hs-source-dirs:   Benchmarks test
+    other-modules:
+        API
+        Arbitrary
+        Certificate
+        CiphersSpec
+        ECHSpec
+        EncodeSpec
+        HandshakeSpec
+        PipeChan
+        PubKey
+        Run
+        Session
+        ThreadSpec
+
+    default-language: Haskell2010
+    ghc-options:      -Wall
+    build-depends:
+        base >=4.9 && <5,
+        QuickCheck,
+        async,
         base64-bytestring,
+        bytestring,
         containers,
-        async,
-        data-default,
-        hourglass,
         crypton,
+        crypton-asn1-types,
         crypton-x509,
         crypton-x509-store,
         crypton-x509-validation,
+        data-default,
         ech-config,
+        hspec,
         network,
         network-run,
-        tls,
-        asn1-types,
-        tasty-bench,
-        QuickCheck,
         serialise,
-        hspec
+        tasty-bench,
+        time-hourglass,
+        tls