About SUPL service, there is still an alternative to Google one:
~$ nslookup supl.izatcloud.net
Server: 127.0.2.2
Address: 127.0.2.2#53
Non-authoritative answer:
Name: supl.izatcloud.net
Address: 207.114.132.150
~$ telnet supl.izatcloud.net 7275
Trying 207.114.132.150...
Connected to supl.izatcloud.net.
Escape character is '^]'.
After all, we are using a Qualcomm modem/GPS and thus it seems reasonable to send to them also the SUPL requests. Moreover, the CAcerts are included into ASOP image also. Otherwise also the XTRA queries cannot be validated with the HTTPS protocol.