Heartbleed affects servers terminating TLS connections using certain versions of OpenSSL. It doesn't impact certificate operations a CA would be doing, and CA root certificates are kept far, far away from front end web servers that might run TLS. Usually in something like this: http://en.wikipedia.org/wiki/Hardware_security_module