Hi,
You may follow along here:
How to use Windows Server 2008 and 2008 R2 extended security updates (ESU)
https://learn.microsoft.com/en-us/windows-server/get-started/extended-security-updates
Frequently asked questions about ESU for Windows Server and SQL Server 2008 and 2008 R2
https://support.microsoft.com/en-us/help/4539036/faq-about-esu-for-windows-server-and-sql-server-2008-2008-r2
----------
(If the reply was helpful please don't forget to accept as answer, thank you)
Best regards,
Leon