How do I get updates for Windows Server 2003 R2 SP2?

Question

Windows Server

Tell me how to get updates for Windows Server 2003?
There are several machines with vintage hardware - for obvious reasons, 8.1 / 10 cannot be put there.
Win 2003 works like clockwork, but root certificates have not been updated for a long time and all browsers and software swear by "Unknown Root CA".
In principle, it is enough for me to update only the certificate store and forget. But when you start Win Update from the menu, nothing is loaded - apparently hardcoded links on MS servers have also changed.
I googled for about an hour and tried different tips. Apparently, you need to start with updating IE, and then manually install updates through some kind of WU Downloader? Is there a solution that works and is simpler?
Thanks a lot!

Answer 1

No way, 2003 is removed from support

Answer 2

Look here - winitpro.ru/index.php/2017/03/20/upnovlenie-kornev...
Maybe something will be useful for you.