Zoho Sign support is completely unresponsive, so I will try to post the problem here.

Our account settings have LTA disabled, but when processing QES via Smart-ID/eParaksts, the engine forces a PAdES-BASELINE-LTA format using a full PDF Uanataca timestamp. Because your engine embeds the full CRL artifact instead of an OCSP response, the Uanataca timestamp seals a 20 MB payload. Please update our backend TSP routing to use OCSP validation instead of full CRL embedding for Baltic eIDs so our files remain under 1 MB.