try this
http://www.businessinsider.com/heartbleed-bug-explainer-2014-4
Now the question is, was it really a bug, or did NSA or the Chinese put it there?