Should only be one canonical on a page.
<link rel=“canonical” href=“https://cheapemailvalidation.com/”/>
And each page should have a canonical to the URL it uses for itself not the home page. So the correct canonical for the index.html main page is the URL of the home page. But all other pages have a different canonical.
And you should know that since the http version is redirected it technically no longer exists so the tag is no longer being seen on the http version.
Things to check On Your side
Check the links on your side. Do you have links with href=“http://cheapemailvalidation.com/” instead of “https://cheapemailvalidation.com/” those should be changed.
Do you have links on other sites or social media pointing toward the http version instead of the https version? That you can change. Links on yelp or business directory sites that you could change. Links on blog profiles that you could change? Links on forums or stackexchange that you could change?
Google has been asked this question
Google has a video posted for your question, I can not embed the video; I can only link to it.
https://www.youtube.com/watch?v=OJEXnCKxV88
The associated page on Google search central is
https://developers.google.com/search/docs/advanced/crawling/301-redirects
and it addresses all methods used by Google to establish which URL will be listed. Note: if using 301 redirects other methods can not be used ... Google addresses other methods because sometimes a 301 redirect can not be used.
BEST PRACTICE short answer, and there is nothing more on your side
If everything is correct, use Google tools to look, then you just need to wait for google.
And note Stephen's answer and Google's the http will be made visible in Google when Google thinks that is the answer you are looking for. So if you are looking for the http you will find them.
So site search is providing the information that google believes you are looking for.
Beyond best practices IE bad practice.
If the pages are receiving traffic from links to the old http. Then you don't need to force google to remove those pages. Doing so will lose that traffic. A forced removal will not pass the benefit made up over the time the page has existed to the new https page. IE RANKING DROP will be self imposed.
To force the removal, again not recommended, turn off the redirect and force the old URL out of Google using the remove tool. Then turn the redirect back on. Doing this will remove all the benefit of the old page and the https will not receive any benefit.
If there is not a compelling reason, mission critical! Serious problem existed with http version ... then do best practice.
If the Critical reason is Google says it is not secure ... note that the new https page will not replace the killed page and if you use Best Practice is will replace the not secure page.
Forced removal is best only done for legal reasons like DMCA, etc.