Edit: Please follow the above link to the original.
I have a self-signed certificate which is use to sign other certificates that I issued. This is all done with an affected version of OpenSSL. These certificates are installed on Windows servers for encryption of https traffic. OpenSSL is NOT installed on the servers. From what I understood, heartbleed only affects servers which directly use OpenSSL to encrypt the traffic. Is this correct or am I still vulnerable?