Once on build 6003, you can install subsequent ESU security updates, such as:
To continue installing updates after 2020, Windows Server 2008 required support for SHA-2 code signing. Build 6003 includes the necessary updates (KB4474419 and KB4493730) to enable SHA-2. windows server 2008 build 6003 upd